Proposed Rules Overhaul Cybersecurity Requirements for Government Contractors | Pillsbury Winthrop Shaw Pittman LLP

The Federal Acquisition Regulation (FAR) Council has proposed two cybersecurity rules for US federal government contractors. The rules will require contractors to report cyber incidents and share information with the government. One rule makes contractors liable for any loss or damage of government data. Moreover, breaches of these rules could potentially lead to civil or criminal penalties under the False Claims Act. The comment period for these rules was extended until February 2, 2024.