East Canton adopts cybersecurity policy to comply with Ohio law, sets implementation deadline

The Village Council adopted an ordinance to adopt a cybersecurity policy required by Ohio Revised Code section 9.64, enacted by House Bill 96. The ordinance sets a local policy framework and timelines for technical implementation and employee training.

The policy lays out guidance on access control, system security, data protection, incident response, training and vendor management and directs the village administrator to distribute the policy to employees and relevant contractors. The ordinance specifies that technical and training requirements shall be completed on or before June 30, 2026, and it includes an emergency clause so the policy takes effect immediately upon passage.

Councilors noted that state law mandated the policy by Sept. 30 and that the state auditor had offered a July 1 implementation target for technical steps; council members said they would consult IT vendors and legal counsel for implementation details. The village administrator and staff are to work with an IT provider (BlueTech was mentioned by staff) to assess costs and training needs and to explore collaboration with other Stark County villages to reduce costs.

The ordinance passed on final reading at this meeting as recorded in the transcript; councilors acknowledged the policy is a living document that will be amended as implementation guidance and costs become clearer.