Ransomware is defined in this new law as “a computer contaminant or lock that restricts access by an unauthorized person to a computer, computer system, or computer network or any data in a computer, computer system, or computer network under circumstances in which a person demands money, property, or a service to remove the computer contaminant or lock, restore access to the computer, computer system, computer network, or data, or otherwise remediate the impact of the computer contaminant or lock.”
However, there are two exceptions to this definition that are built-in to the statute. Software is not ransomware for the purposes of this law “if the software restricts access to data because: (1) authentication is required to upgrade or access purchased content; or (2) access to subscription content has been blocked for nonpayment.”