REFERENCE TITLE: governmental entities; ransomware payment; prohibition State of Arizona House of Representatives Fifty-fifth Legislature Second Regular Session 2022 HB 2145 Introduced by Representatives Bolick: Biasiucci, Blackman, Carroll, Payne AN ACT Amending title 18, chapter 5, article 4, Arizona Revised Statutes, by adding section 18-553; relating to data security breaches. (TEXT OF BILL BEGINS ON NEXT PAGE) REFERENCE TITLE: governmental entities; ransomware payment; prohibition State of Arizona House of Representatives Fifty-fifth Legislature Second Regular Session 2022 HB 2145 Introduced by Representatives Bolick: Biasiucci, Blackman, Carroll, Payne REFERENCE TITLE: governmental entities; ransomware payment; prohibition State of Arizona House of Representatives Fifty-fifth Legislature Second Regular Session 2022 HB 2145 Introduced by Representatives Bolick: Biasiucci, Blackman, Carroll, Payne AN ACT Amending title 18, chapter 5, article 4, Arizona Revised Statutes, by adding section 18-553; relating to data security breaches. (TEXT OF BILL BEGINS ON NEXT PAGE) Be it enacted by the Legislature of the State of Arizona: Section 1. Title 18, chapter 5, article 4, Arizona Revised Statutes, is amended by adding section 18-553, to read: START_STATUTE18-553. Ransomware payment; prohibition; notice; definitions A. This state or a political subdivision of this state: 1. may not make a payment to remove or decrypt RANSOMWARE from the system files of this state or a political subdivision. 2. Shall immediately notify the director of the arizona department of homeland security if a ransomware attack occurs on the system files of this state or the political subdivision. B. For the purposes of this section: 1. "Political subdivision" means a county, city, charter city, town, community college district or school district in this state. 2. "Ransomware" means malware that requires the victim to pay a ransom to access ENCRYPTED files. END_STATUTE Be it enacted by the Legislature of the State of Arizona: Section 1. Title 18, chapter 5, article 4, Arizona Revised Statutes, is amended by adding section 18-553, to read: START_STATUTE18-553. Ransomware payment; prohibition; notice; definitions A. This state or a political subdivision of this state: 1. may not make a payment to remove or decrypt RANSOMWARE from the system files of this state or a political subdivision. 2. Shall immediately notify the director of the arizona department of homeland security if a ransomware attack occurs on the system files of this state or the political subdivision. B. For the purposes of this section: 1. "Political subdivision" means a county, city, charter city, town, community college district or school district in this state. 2. "Ransomware" means malware that requires the victim to pay a ransom to access ENCRYPTED files. END_STATUTE