Business Software Alliance
votes For
We propose a minimum of 72 hours for the preliminary report for high-risk systems, which would allow sufficient time to assess the facts and determine whether the event meets the definition of a “serious incident.”AI Verified source (Feb 12, 2026)