Proposed ransomware payment disclosure law met with mixed re