חוק התמודדות עם תקיפות סייבר חמורות במגזר השירותים הדיגיטליים ושירותי האחסון (הוראת שעה – חרבות ברזל) (תיקון מס' 3), התשפ"ה-2025

Government bill · Published 14 Aug 2025

1Tabled
2Reading 116 Jul 2025
3Committee
4Readings 2-313 Aug 2025
5Published14 Aug 2025

How it affects you

Digital service and storage providers must report significant cyberattacks immediately or within 24 and 72 hours, depending on their chosen reporting route. These duties and powers continue until January 31, 2026, and an authorized director may demand information or documents from a provider.

Who gains

Authorized directors May demand any information or document from a provider Section 3

Who pays

Service providers Must report immediately, or within 24 and 72 hours under the staged route Section 4
Service providers Must promptly notify connected organizations that may be directly harmed Section 5

Under the table

Temporary provision
The law, or part of it, is temporary and needs an extension to stay in force.
Extended again
The temporary provision was extended again, 3 extensions so far.