NJ Bill S297, known as the NJ 3-day cyber incident reporting law, put new requirements into place for government entities, as well as private government contractors, to report data breaches to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) within 72 hours of an incident occurring.
The bill that was signed into law on March 13, 2023 is meant to improve cybersecurity communications between the states’ government entities, and to collect insightful data about how government departments are being breached to mitigate the risk of similar attacks in the future.