If your business is in one of 16 critical infrastructure sectors, a new law will require that you advise the government if you’ve been successfully attacked. You must report hacks within 72 hours of the discovery of an incident, and 24 hours if you make a ransomware payment.
More from Computer World: https://www.computerworld.com/article/3654178/you-cant-keep-quiet-when-youre-hacked-anymore.html