The country will require certain organizations to report ransomware payments and communications within 72 hours after they’re made or face potential civil penalties.
Source: htdarkreading.com