Insure Cybersecurity Act of 2025

Senate Bill

S. 245

119th Congress

Insure Cybersecurity Act of 2025

Placed on Senate Legislative Calendar under General Orders. Calendar No. 90.

Introduced:Jan 24, 2025

Primary Sponsor

John Wright Hickenlooper

Senator

Democratic

CO

Cosponsors

1

Quick Stats

Policy Area

Science, Technology, Communications

Summary

This bill directs NTIA to establish a working group addressing challenges in the cyber insurance market. The group will analyze issues facing both insurers and customers, develop guidance on evaluating policies, and explain common terminology in plain language. Topics include coverage for ransomware incidents, ransom payments, and constraints on covering reputational damage and intellectual property losses. NTIA must publish informational resources based on the findings.

Latest Action

Placed on Senate Legislative Calendar under General Orders. Calendar No. 90.

AI Summary

Plain-English explanation of this bill

This bill directs NTIA to establish a working group addressing challenges in the cyber insurance market. The group will analyze issues facing both insurers and customers, develop guidance on evaluating policies, and explain common terminology in plain language. Topics include coverage for ransomware incidents, ransom payments, and constraints on covering reputational damage and intellectual property losses. NTIA must publish informational resources based on the findings.

Last updated: 1/4/2026

Official Summary

Congressional Research Service summary

Insure Cybersecurity Act of 2025This bill requires the National Telecommunications and Information Administration (NTIA) to establish a working group on cyber insurance policies. Under the bill, these are defined as policies that offer coverage for losses, damages, and costs incurred due to cyberattacks and related incidents.The working group is directed to analyze and address issues in the cyber insurance market facing both insurers and their customers. Specifically, the working group must develop information for customers on how to effectively evaluate policy options, and for insurers on how to clearly communicate with customers regarding policy provisions.Additionally, the working group is directed to analyze and explain in layman’s terms<ul><li>terminology commonly used in cyber insurance policies, including terminology used to include or exclude coverage for losses from cyber incidents;</li><li>how common policy provisions correspond to cyber incidents and potential responses, including ransomware and potential ransom payments; and</li><li>constraints faced by insurers in covering higher losses in cyber risk areas, such as reputational damage and loss of intellectual property.</li></ul>At the conclusion of the working group's term, NTIA must publish and disseminate informative resources for cyber insurance stakeholders, including any recommendations formulated by the working group.

Key Points

Main provisions of the bill

Establishes NTIA working group on cyber insurance policies
Develops guidance for customers on evaluating policy options
Creates plain-language explanations of common policy terminology
Addresses ransomware coverage and ransom payment provisions
Analyzes insurer constraints on covering reputational and IP losses

How This Impacts Americans

Potential effects on citizens and communities

As cyberattacks increase, businesses need better information to make informed decisions about cyber insurance coverage. This bill addresses the opacity of cyber insurance policies that often leave customers unsure what is covered. The working group approach brings together stakeholders to improve market transparency without directly regulating the insurance industry.

Policy Areas

Primary Policy Area

Science, Technology, Communications

Related Subjects

Advisory bodies

Computer security and identity theft

Computers and information technology

Congressional oversight

Consumer affairs

Government information and archives

Government studies and investigations

Insurance industry and regulation

Public-private cooperation

Scope & Jurisdiction

Jurisdiction Level

federal

Congressional Session

119th Congress

Citation Reference

245, 119th Congress (2025). "Insure Cybersecurity Act of 2025". Source: Voter's Right Platform. https://votersright.org/bills/118-s-245