Illinois 2023-2024 Regular Session

Illinois Senate Bill SB1740 Compare Versions

Only one version of the bill is available at this time.

Old	New	Differences
1	1	103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 SB1740 Introduced 2/9/2023, by Sen. Steve Stadelman SYNOPSIS AS INTRODUCED: New Act Creates the Ransomware Attack Act. Provides that a governmental unit (the State, a unit of local government, or any other subdivision of the State) may not use any public funds to pay any person or entity to recover its computer system after a ransomware attack unless the Governor first makes a proclamation that the ransomware attack against the governmental unit is a disaster under the Illinois Emergency Management Agency Act and, in the proclamation, authorizes the governmental unit to make a payment to recover its computer system following the ransomware attack. Requires a governmental unit to report a ransomware attack to the Department of Innovation and Technology no later than 24 hours after discovering the attack, and requires the Department of Innovation and Technology to adopt rules to implement reporting requirements. Limits the current exercise of home rule powers. Effective immediately. LRB103 28322 AWJ 54701 b A BILL FOR 103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 SB1740 Introduced 2/9/2023, by Sen. Steve Stadelman SYNOPSIS AS INTRODUCED: New Act New Act Creates the Ransomware Attack Act. Provides that a governmental unit (the State, a unit of local government, or any other subdivision of the State) may not use any public funds to pay any person or entity to recover its computer system after a ransomware attack unless the Governor first makes a proclamation that the ransomware attack against the governmental unit is a disaster under the Illinois Emergency Management Agency Act and, in the proclamation, authorizes the governmental unit to make a payment to recover its computer system following the ransomware attack. Requires a governmental unit to report a ransomware attack to the Department of Innovation and Technology no later than 24 hours after discovering the attack, and requires the Department of Innovation and Technology to adopt rules to implement reporting requirements. Limits the current exercise of home rule powers. Effective immediately. LRB103 28322 AWJ 54701 b LRB103 28322 AWJ 54701 b A BILL FOR
2	2	103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 SB1740 Introduced 2/9/2023, by Sen. Steve Stadelman SYNOPSIS AS INTRODUCED:
3	3	New Act New Act
4	4	New Act
5	5	Creates the Ransomware Attack Act. Provides that a governmental unit (the State, a unit of local government, or any other subdivision of the State) may not use any public funds to pay any person or entity to recover its computer system after a ransomware attack unless the Governor first makes a proclamation that the ransomware attack against the governmental unit is a disaster under the Illinois Emergency Management Agency Act and, in the proclamation, authorizes the governmental unit to make a payment to recover its computer system following the ransomware attack. Requires a governmental unit to report a ransomware attack to the Department of Innovation and Technology no later than 24 hours after discovering the attack, and requires the Department of Innovation and Technology to adopt rules to implement reporting requirements. Limits the current exercise of home rule powers. Effective immediately.
6	6	LRB103 28322 AWJ 54701 b LRB103 28322 AWJ 54701 b
7	7	LRB103 28322 AWJ 54701 b
8	8	A BILL FOR
9	9	SB1740LRB103 28322 AWJ 54701 b SB1740 LRB103 28322 AWJ 54701 b
10	10	SB1740 LRB103 28322 AWJ 54701 b
11	11	1 AN ACT concerning government.
12	12	2 Be it enacted by the People of the State of Illinois,
13	13	3 represented in the General Assembly:
14	14	4 Section 1. Short title. This Act may be cited as the
15	15	5 Ransomware Attack Act.
16	16	6 Section 5. Definitions. As used in this Act:
17	17	7 "Governmental unit" means an agency of the State, a unit
18	18	8 of local government, or any other subdivision of the State.
19	19	9 "Ransomware" means malware that prevents or limits a user
20	20	10 from accessing the user's computer system by locking the
21	21	11 user's files until a ransom is paid.
22	22	12 Section 10. Payments due to ransomware prohibited;
23	23	13 Governor-approved payments.
24	24	14 (a) Except as provided in subsection (b), a governmental
25	25	15 unit may not use any public funds to pay any person or entity
26	26	16 to recover its computer system after a ransomware attack.
27	27	17 (b) If the governor makes a proclamation that a ransomware
28	28	18 attack against a governmental unit is a disaster under the
29	29	19 Illinois Emergency Management Agency Act and, in the
30	30	20 proclamation, authorizes the governmental unit to make a
31	31	21 payment to recover its computer system following the
32	32	22 ransomware attack, then the governmental unit may make any
33	33
34	34
35	35
36	36	103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 SB1740 Introduced 2/9/2023, by Sen. Steve Stadelman SYNOPSIS AS INTRODUCED:
37	37	New Act New Act
38	38	New Act
39	39	Creates the Ransomware Attack Act. Provides that a governmental unit (the State, a unit of local government, or any other subdivision of the State) may not use any public funds to pay any person or entity to recover its computer system after a ransomware attack unless the Governor first makes a proclamation that the ransomware attack against the governmental unit is a disaster under the Illinois Emergency Management Agency Act and, in the proclamation, authorizes the governmental unit to make a payment to recover its computer system following the ransomware attack. Requires a governmental unit to report a ransomware attack to the Department of Innovation and Technology no later than 24 hours after discovering the attack, and requires the Department of Innovation and Technology to adopt rules to implement reporting requirements. Limits the current exercise of home rule powers. Effective immediately.
40	40	LRB103 28322 AWJ 54701 b LRB103 28322 AWJ 54701 b
41	41	LRB103 28322 AWJ 54701 b
42	42	A BILL FOR
43	43
44	44
45	45
46	46
47	47
48	48	New Act
49	49
50	50
51	51
52	52	LRB103 28322 AWJ 54701 b
53	53
54	54
55	55
56	56
57	57
58	58
59	59
60	60
61	61
62	62	SB1740 LRB103 28322 AWJ 54701 b
63	63
64	64
65	65	SB1740- 2 -LRB103 28322 AWJ 54701 b SB1740 - 2 - LRB103 28322 AWJ 54701 b
66	66	SB1740 - 2 - LRB103 28322 AWJ 54701 b
67	67	1 payment needed using public funds to end the ransomware
68	68	2 attack.
69	69	3 Section 15. Reports of ransomware attacks; rules. A
70	70	4 governmental unit must report a ransomware attack to the
71	71	5 Department of Innovation and Technology no later than 24 hours
72	72	6 after discovering the attack. The Department of Innovation and
73	73	7 Technology shall adopt rules to implement reporting
74	74	8 requirements under this Section.
75	75	9 Section 90. Home rule. A home rule unit may not authorize
76	76	10 payment for ransomware in a manner inconsistent with this Act.
77	77	11 This Act is a limitation under subsection (i) of Section 6 of
78	78	12 Article VII of the Illinois Constitution on the concurrent
79	79	13 exercise by home rule units of powers and functions exercised
80	80	14 by the State.
81	81	15 Section 99. Effective date. This Act takes effect upon
82	82	16 becoming law.
83	83
84	84
85	85
86	86
87	87
88	88	SB1740 - 2 - LRB103 28322 AWJ 54701 b