Current through Register Vol. XLI, No. 50, December 13, 2024
Section 163-3-3 - Reporting by any entity3.1. All entities shall report qualified cyber incidents to the Cybersecurity Office via online portal incident.wv.gov within 10 days of discovery of an incident. Notification to the Cybersecurity Office should be made before any citizen notification of the incident.3.2. The report of a qualified cyber incident shall not include any personally identifiable information (PII), protected health information (PHI), passwords or login information.