Document ID: chunk:federal_register_of_legislation:C2024A00098:section:25
Version: federal_register_of_legislation:C2024A00098
Segment Type: section
Provision Reference: s 25
Character Range: 43250–43984

25  Simplified outline of this Part

      This Part imposes reporting obligations on certain entities who are impacted by a cyber security incident, and who have provided or are aware that another entity has provided, a payment or benefit (called a ransomware payment) to an entity that is seeking to benefit from the impact or the cyber security incident.
      Particular information must be included in a ransomware payment report, including information relating to the cyber security incident, the demand made by the extorting entity and the ransomware payment.
      An entity may be liable to a civil penalty if the entity fails to make a ransomware payment report as required by this Part.

Division 2—Reporting obligations