Cybersecurity is the process of protecting internet-connected computer systems, such as hardware, software, and data, from cyber-threats. Cybersecurity is used by individuals and businesses to protect against unauthorized access to these computer systems when cyber criminals attempt to change, destroy, and steal sensitive data; extort money by making the systems unworkable; and interrupt business operations.
In Ohio, cybersecurity is governed by a combination of state statutes and federal laws designed to protect computer systems and sensitive data from cyber-threats. Ohio has enacted legislation such as the Ohio Data Protection Act, which incentivizes businesses to implement a cybersecurity program by providing a legal safe harbor against tort claims in the event of a data breach, provided they have a compliant cybersecurity framework in place. Additionally, Ohio Revised Code Section 2913.01 includes provisions related to computer crimes, addressing unauthorized use of computer or network resources, and data theft. At the federal level, laws such as the Computer Fraud and Abuse Act (CFAA) and the Cybersecurity Information Sharing Act (CISA) also apply, providing guidelines and penalties for cybercrimes. These laws work in tandem to deter cybercriminals, protect against unauthorized access, and help maintain the integrity of computer systems and sensitive data for both individuals and businesses in Ohio.