eNews: Action Alert – January 28, 2022

Oppose HB1290 (Hayes) – Cyber Security
Incident Reporting
Download a one-page of this alert here >.
HB1290 (Hayes) would require all public bodies to report any known incidents that compromise and threaten the security of the public body’s information technology systems to the State Chief Information Officer (CIO) within 24 hours from when the incident was discovered.
Concerns
VML has serious concerns with this legislation due to the time constraint, lack of definitions, lack of reporting guidance, and the inability to meet with an insurance provider or cyber expert of your choice before having to report to the State.
- Time Constraint: 24 hours is not enough time to properly assess the extent of the situation, formulate the best strategy, and speak with staff and other individuals affected.
- Definitions: VML has serious concerns about the lack of definition of “incident”. Without a definitive definition the term “incident” becomes extremely vague allowing for misinterpretation on what constitutes as an incident that must be reported. Secondly, there is no specific language on what needs to be reported. Once again allowing for misinterpretation of what must be reported.
- Reporting: HB1290 requires the public body to report the incident to the State before having the opportunity to discuss the matter with your insurance company, provider, or agency of choice. This creates another reporting mandate for public bodies.
Action Requested
VML asks that you contact your legislators and members of the Communications, Technology, and Innovations Committee to oppose this bill and to suggest that a study be conducted first. VML asks that you use this language to request to study: “The Virginia Information Technologies Agency, working with state and local stakeholders, should develop and publish guidance concerning the scope and implementation of the required incident reporting.”
Current GA Committee:
This bill will be heard at 10:00 AM on Monday, January 31 in the House Communications, Technology, and Innovations Committee.
Committee Members:
Brewer (Chair) | delEBrewer@house.virginia.gov | (804) 698-1064
Edmunds (Vice Chair) | delJEdmunds@house.virginia.gov | (804) 698-1060
Byron | delKByron@house.virginia.gov | (804) 698-1022
Campbell (Of Smyth) | delJCampbell@house.virginia.gov | (804) 698-1006
McNamara | delJMcNamara@house.virginia.gov | (804) 698-1008
Hodges | delKHodges@house.virginia.gov | (804) 698-1098
Davis | delGDavis@house.virginia.gov | (804) 698-1084
Cordoza | delaccordoza@house.virginia.gov | (804) 698-1091
Anderson | deltanderson@house.virginia.gov | (804) 698-1083
Greenhalgh | delkgreenhalgh@house.virginia.gov | (804) 698-1085
Tata | delaftata@house.virginia.gov | (804) 698-1082
Lopez | delALopez@house.virginia.gov | (804) 698-1049
Simon | delMSimon@house.virginia.gov | (804) 698-1053
Convirs-Fowler | delKConvirs-Fowler@house.virginia.gov | (804) 698-1021
Roem | delDRoem@house.virginia.gov | (804) 698-1013
Ward | delJWard@house.virginia.gov | (804) 698-1092
Helmer | delDHelmer@house.virginia.gov | (804) 698-1040
Sewell | delbsewell@house.virginia.gov | (804) 698-1051
Shin | delishin@house.virginia.gov | (804) 698-1086
Clark | delnclark@house.virginia.gov | (804) 698-1079
Glass | deljglass@house.virginia.gov | (804) 698-1014
VML Contact: Josette Bulova, jbulova@vml.org