S. 2875: Cyber Incident Reporting Act of 2021

117th Congress · introduced 2021-09-28 · Science, Technology, Communications · Latest: Placed on Senate Legislative Calendar under General Orders. Calendar No. 633.

federal

Follow this bill, step by step

Where it came from: introduced 2021-09-28 · official record
Who proposed it: Sen. Peters, Gary C. [D-MI] · what a sponsor is
What happened next: no floor votes in our records yet. Why?
Where it stands now: Placed on Senate Legislative Calendar under General Orders. Calendar No. 633. Not final yet: this can still change. We check for updates every day.
If it becomes law and spends money: follow the money to money laws, then agencies and contracts and grants.

What does this mean?

Official title

Cyber Incident Reporting Act of 2021

Plain summary

Cyber Incident Reporting Act of 2021 This bill requires reporting and other actions to address cybersecurity incidents, including ransomware attacks. Entities that own or operate critical infrastructure must report cyber incidents and ransom payments within specified time frames while other entities may voluntarily report incidents. The Cybersecurity and Infrastructure Security Agency (CISA) must establish an office to receive and analyze such reports. The bill limits the use and disclosure of reported information. The information may be shared (subject to protections) with federal agencies or to address cybersecurity threats. However, shared information may not be used as a basis for certain regulatory enforcement. Additionally, an entity may not be liable for submitting required reports. Further, reports do not constitute waivers of applicable protections against disclosure (e.g., attorney-client privilege) and are not subject to laws governing release of federal records. The bill authorizes CISA to take specified action (e.g., issuing subpoenas) if an entity fails to submit a required report. CISA may share subpoenaed information with a regulator or the Department of Justice for regulatory enforcement or criminal prosecution. A federal agency must share any information it receives about cyber attacks with CISA. The bill also establishes (1) an interagency council to standardize federal reporting of cybersecurity threats, (2) a task force on ransomware attacks, and (3) a pilot program to identify information systems vulnerable to ransomware attacks.

Congressional Research Service summary (Reported to Senate), quoted unchanged (nonpartisan). Read the source.

What a vote does

A “Yea” vote

If it passes both chambers and is signed, it becomes law.

A “Nay” vote

If it is not passed, current law stays as it is.

PSI Sci description of the legislative step (not an opinion).

What does this mean? (plain words)

Official text

Cyber Incident Reporting Act of 2021

Source: Congressional Research Service summary (Reported to Senate)

AI explanation – may be wrong, check the official text

No AI explanation yet. It takes up to a minute to write and is then saved for everyone.

Limited to a few requests an hour per person.

The strongest published arguments

Arguments for (supporters)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Arguments against (opponents)

Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.

Alternatives

Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.

How did my representative vote? · This bill's floor votes

Officials and money

Sponsor: Sen. Peters, Gary C. [D-MI] · 3 cosponsors

Cost estimate: CBO cost estimate: S. 2875, Cyber Incident Reporting Act of 2021 (2021-11-30)

Cosponsors on this site

Thom Tillis (R-NC)

Sponsor's campaign money: Sen. Peters, Gary C. [D-MI] reported raising $303,094 (2025–2026). Details. Shown for context only; it does not mean any donor supported this bill.

No linked floor roll calls in our collected records yet. This does not mean the bill has never had a vote. Check the official bill history.

Words on this page, explained (2)

Bill: A proposed law. It becomes law only if it passes the legislature and is signed by the president or governor (or a veto is overridden).
Securities: Financial investments that can be bought and sold, such as stocks and bonds.

Plain meanings written from linked sources. All words.

Sources

Congressional Research Service summary (Reported to Senate)
Congress.gov
Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-117s2875.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/117/s>

Record fed-us-cong117-s2875 · catalog fed-us-congress-bills-cong117 · updated 2026-11-15 by psicol fed-bills-cong117