Back News.Bloomberglaw

Health, Auto Sectors Call for Limits on Cyber Reporting Rule

News.Bloomberglaw • June 16, 2026

Critical infrastructure professionals took advantage Monday of a final opportunity to convince the Cybersecurity and Infrastructure Security Agency to ease Biden-era requirements for how companies report cyber incidents to the US government before they go into effect.

In a two-hour town hall, which drew 250 attendees, speakers said the proposed rule that would implement the Cyber Incident Reporting for Critical Infrastructure Act of 2022, known as CIRCIA, would create overlapping reporting requirements for companies that suffer cyber incidents like ransomware attacks.

a dozen speakers representing local government, health, automotive, and construction sectors, among others, asked the agency to ...

Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Finalizes Cyber Incident Reporting Rules for Critical Infrastructure The Cybersecurity and Infrastructure Security Agency (CISA) is finalizing rules under the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA), requiring covered entities to report cyber incidents within 72 hours and ransom payments within 24 hours. The rules will apply to entities in critical infrastructure sectors, including healthcare and energy, even if they do not own critical assets. During town hall meetings, industry representatives expressed concerns about overlapping reporting requirements and the burden of detailed reporting. CISA is accepting feedback on the proposed rules, which are expected to significantly impact incident response planning for affected companies. The rules aim to enhance national cybersecurity by ensuring timely reporting of significant cyber incidents. 10 sources 28

Health, Auto Sectors Call for Limits on Cyber Reporting Rule

The full story

Extracted Entities

Attack Types (1)

Industries (2)