Shutdown Stalls Compliance Plans for Cyber Breach Reporting Rule

A partial shutdown of the Department of Homeland Security is delaying the finalization of the Cyber Incident Reporting for Critical Infrastructure Act rule, which would impose stricter breach‑notification requirements on critical‑infrastructure firms. The agency announced in February that it was reopening the comment period after companies voiced concerns about the rule’s scope in June 2024. With funding uncertainty persisting, firms must navigate a moving target while trying to influence both the rule’s content and its enforcement approach. The delay adds operational risk for organizations preparing compliance programs.

Source: DataBreaches.net