REFERENCE TITLE: governmental entities; ransomware payment; prohibition

State of Arizona

House of Representatives

Fifty-fifth Legislature

Second Regular Session

2022

HB 2145

Introduced by

Representatives Bolick: Biasiucci, Blackman, Carroll, Payne

AN ACT

Amending title 18, chapter 5, article 4, Arizona Revised Statutes, by adding section 18-553; relating to data security breaches.

(TEXT OF BILL BEGINS ON NEXT PAGE)

Be it enacted by the Legislature of the State of Arizona:

Section 1. Title 18, chapter 5, article 4, Arizona Revised Statutes, is amended by adding section 18-553, to read:

START_STATUTE18-553. Ransomware payment; prohibition; notice; definitions

A. This state or a political subdivision of this state:

1. may not make a payment to remove or decrypt RANSOMWARE from the system files of this state or a political subdivision.

2. Shall immediately notify the director of the arizona department of homeland security if a ransomware attack occurs on the system files of this state or the political subdivision.

B. For the purposes of this section:

1. "Political subdivision" means a county, city, charter city, town, community college district or school district in this state.

2. "Ransomware" means malware that requires the victim to pay a ransom to access ENCRYPTED files. END_STATUTE