Law / United States / 
New Hampshire
Political subdivision cybersecurity incident report to the New Hampshire cyber integration center
Political subdivision cybersecurity incident reporting, RSA 31:103-b
In force since .
A vulnerability and incident reporting rule binding government bodies.
- Obligation class
- Reporting
As of .
What it requires
- This binds the governing body, or the chief administrative officer or designee, of any political subdivision of New Hampshire.
- If you know of or suspect a cybersecurity incident within the political subdivision's information systems, or within any vendor acting as an agent of the political subdivision, report it immediately upon discovery to the New Hampshire cyber integration center of the department of information technology.
- Disclose all known information and interactions to the cyber integration center when you report.
These lines are LexLint's reading of the law's text, as of .
What this law does
The governing body, or chief administrative officer or designee, of any political subdivision who knows of or suspects a cybersecurity incident within the political subdivision's information systems, or within any vendor acting as an agent of the political subdivision, must immediately report the incident upon discovery to the New Hampshire cyber integration center of the department of information technology.
The political subdivision's reporter must disclose all known information and interactions to the cyber integration center. A cybersecurity incident is an occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information it processes, stores, or transmits, or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies. The section took effect on .