S. 245 · Where this bill is now
In committee
Introduced in the Senate, Jan 24, 2025
What this bill does
In plain words · AI-written from the official summaryMakes cyber insurance clearer for everyone
The bill tells the National Telecommunications and Information Administration to set up a working group focused on cyber insurance—the coverage people and businesses buy to protect themselves from cyberattacks. The group's job is to figure out what's confusing in the cyber insurance market and then create clear guides. They'll explain insurance jargon in plain language, show how policies actually work when cyberattacks happen (like ransomware), and help explain why insurers sometimes won't cover certain types of losses.
How it affects you
If you own a business or manage one, this could help you better understand what cyber insurance policies actually cover before you buy one. Insurers would also get guidance on how to explain their products more clearly to customers. For most people, the changes are indirect—you'll benefit from a clearer insurance market if you or your workplace ever need cyber coverage, but this bill doesn't directly protect you from cyberattacks or create new insurance requirements.
Read the official summary (Introduced in Senate, Jan 24, 2025)
Insure Cybersecurity Act of 2025
This bill requires the National Telecommunications and Information Administration (NTIA) to establish a working group on cyber insurance policies. Under the bill, these are defined as policies that offer coverage for losses, damages, and costs incurred due to cyberattacks and related incidents.
The working group is directed to analyze and address issues in the cyber insurance market facing both insurers and their customers. Specifically, the working group must develop information for customers on how to effectively evaluate policy options, and for insurers on how to clearly communicate with customers regarding policy provisions.
Additionally, the working group is directed to analyze and explain in layman’s terms
• terminology commonly used in cyber insurance policies, including terminology used to include or exclude coverage for losses from cyber incidents;
• how common policy provisions correspond to cyber incidents and potential responses, including ransomware and potential ransom payments; and
• constraints faced by insurers in covering higher losses in cyber risk areas, such as reputational damage and loss of intellectual property.
At the conclusion of the working group's term, NTIA must publish and disseminate informative resources for cyber insurance stakeholders, including any recommendations formulated by the working group.
Written by AI (Claude) using only the official summary by the Congressional Research Service, the Library of Congress’s nonpartisan research staff. It can miss nuance, so check the official summary and the bill text for details.
1st SessionS. 245
A BILL
Insure Cybersecurity Act of 2025
Sponsor: Sen. John W. Hickenlooper (D-CO) · Introduced Jan 24, 2025 · Science, Technology, Communications · 2 versions of the text
Sources: Congress.gov actions and votes · bill text from GovInfo · latest official action Jun 9, 2025: “Placed on Senate Legislative Calendar under General Orders. Calendar No. 90.”
Sections
The wording of this bill hasn’t changed across its 2 official versions.