Cybersecurity Requirements for Local Government Compliance
Ohio Revised Code Section 9.64 requires each local government entity to implement a basic cybersecurity program. This mandate is a direct response to rising cyber threats across the state, formalizing the legal necessity for municipalities and school districts to protect public data.
Ensuring your organization achieves full compliance with this new law is no longer optional; it requires entities to:
1. Provide Employee Training.
- Deadlines to implement cybersecurity training for employees:
-
- January 1, 2026 I Counties & Cities
- July 1, 2026 I Political Subdivisions
-
2. Adopt a formalized cyber incident response plan.
3. Implement practices to assess and remediate cyber risks.
4. Report cyber incidents to the Ohio Cyber Integration Center.
- By law, you must start reporting incidents starting September 30, 2025
Disclaimer: The information on this page is not legal advice. For guidance on your compliance with any Ohio state laws, please consult a qualified attorney.
