Louisiana Revised Statutes 51:2114 – A. To the extent a provider has actual knowledge of a cyber incident, which impacts a public body, the provider shall notify the Louisiana Fusion Center of the cyber incident within
Terms Used In Louisiana Revised Statutes 51:2114
- Contract: A legal written agreement that becomes binding when signed.
- Cyber incident: means the compromise of the security, confidentiality, or integrity of computerized data due to the exfiltration, modification, or deletion that results in the unauthorized acquisition of and access to information maintained by a public body. See Louisiana Revised Statutes 51:2112
- Cyber ransom or ransomware: means a type of malware that encrypts or locks valuable digital files and demands a ransom to release the files. See Louisiana Revised Statutes 51:2112
- Discovery: Lawyers' examination, before trial, of facts and documents in possession of the opponents to help the lawyers prepare for trial.
- Louisiana Fusion Center: means the Department of Public Safety and Corrections, office of state police, Louisiana State Analytical and Fusion Exchange. See Louisiana Revised Statutes 51:2112
- Provider: means a managed service provider or managed security service provider that requires remote management or operational control of a public body's network or end user systems. See Louisiana Revised Statutes 51:2112
- Public body: means any branch, department, office, agency, board, commission, district, governing authority, political subdivision, or any other instrumentality of the state, parish, or municipal government, including a public or quasi-public nonprofit corporation designated as an entity to perform a governmental or proprietary function. See Louisiana Revised Statutes 51:2112
A. To the extent a provider has actual knowledge of a cyber incident, which impacts a public body, the provider shall notify the Louisiana Fusion Center of the cyber incident within twenty-four hours of discovery of the incident.
B. If a provider has a cyber incident which impacts a public body and the provider or public body makes a payment of cyber ransom or ransomware, to the extent the provider has actual knowledge of the payment, the provider shall report the payment of the cyber ransom or ransomware to the Louisiana Fusion Center within ten calendar days of the payment.
C. A provider who submits a notification pursuant to Subsection A or B of this Section shall include in the notification the name of the impacted body.
D. A public body shall include the requirements of this Section in its contracts with providers. A provider shall be required to comply with the provisions of this Section only to the extent the contract between the public body and the provider explicitly incorporates the provisions of this Chapter.
Acts 2020, No. 117, §2, eff. Feb. 1, 2021.