Ohio law to require local governments to formally approve ransomware payments

Ohio's HB 96, effective September 30, 2025, requires counties, cities, townships, school districts, libraries, and other local governments to adopt cybersecurity policies meeting certain standards and bars political subdivisions from paying ransom demands unless the legislative authority formally approves the payment in a resolution declaring it to be in the public interest.