What's happening
This bill creates a commission to study EU data protection laws and New York's cybersecurity, aiming to develop new privacy legislation.
Why it matters
Potential for Stronger Privacy Protections. By explicitly studying the EU's General Data Protection Regulation (GDPR), this commission could push New York toward adopting some of the strictest personal data privacy laws in the U.S., impacting how businesses and government handle personal information.
Broad Impact Across Critical Sectors. The commission's mandate covers not only government systems but also private sector infrastructure like financial networks, utilities, and telecommunications. Any resulting legislation could introduce new compliance requirements and security standards for a wide range of industries.
Expert-Driven, Comprehensive Review. The bill ensures that commission members and consulted experts have deep knowledge in cybersecurity, cybercrime, telecommunications, and related fields, increasing the likelihood of well-informed recommendations that address real-world threats and vulnerabilities.
Statewide Focus with National Implications. If New York leads on privacy and cybersecurity following this commission’s work, it could set a precedent for other states or even federal action, given New York’s influence as a business and technology hub.
Albany, before your first meeting.
Every bill that moved yesterday, summarized in a sentence and ranked by impact. The Albany Scorecard follows on Sundays.
Free. Unsubscribe in one click. Want alerts on specific bills? Create an account.
Who cares
Headline styles
Study State Cyber Security
Plain English, a few words. Used as the page title.
Sponsors
1 Co-sponsor
History
- Referred to veterans, homeland security and military affairs
Companion bill
The same bill in the other chamber. A bill becomes law when one version passes both houses and the governor signs it, so either number can carry it.
Study State Cyber Security
In Assembly Committee · Governmental Operations · Sponsor Clyde Vanel
Full text
2 pagesUnderlined is new[Struck] is removedOfficial text on nysenate.gov ↗
STATE OF NEW YORK
7726
IN SENATE
February 13, 2018
Introduced by Sen. PARKER -- read twice and ordered printed, and when printed to be committed to the Committee on Veterans, Homeland Security and Military Affairs
AN ACT establishing a commission to study the European Union's general protection data regulation and the current state of cyber security in the state
The People of the State of New York, represented in Senate and Assembly, do enact as follows:
Section 1. a. The office of information technology services, in consultation with, and using data collected by, the state board of elections, shall establish a commission to study the European Union's general protection data regulation and the current state of cyber security in the state, to develop legislation to protect people's online personal information.
b. Such commission shall consist of eleven members to be appointed by the director of the office of information technology services. Such members shall have knowledge of and expertise in cyber security, telecommunications, internet service delivery, public protection, computer systems and/or computer networks.
c. Such commission shall investigate, discuss and make recommendations concerning cyber security issues using the European Union's general protection data regulation as a model involving both the public and private sectors and the necessary steps New York state should take to protect:
i. critical cyber infrastructure;
ii. financial systems;
iii. telecommunications networks;
iv. electrical grids;
v. security systems;
vi. first responder systems and infrastructure;
vii. physical infrastructure systems;
viii. transportation systems; and
ix. any additional sectors of state government and the private sector as the commission deems necessary.
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD14167-01-8
S. 7726 2
d. The purpose of such commission shall be to promote the development of innovative, actionable policies to ensure that New York state is in the forefront of personal cyber security defense.
e. The members of such commission shall receive no compensation for their services, but may receive actual and necessary expenses, and shall not be disqualified for holding any other public office or employment by means of their service as a member of the commission.
f. Such commission shall be entitled to request and receive, and shall be provided with, such facilities, resources and data of any agency, department, division, board, bureau, commission, or public authority of the state, as they may reasonably request, to properly carry out their powers, duties and purpose.
§ 2. No later than one year after the effective date of this act, the office of information technology services shall submit to the governor and the legislature a report regarding the European Union's general protection data regulation and the current state of cyber security in the state.
§ 3. The office of information technology services shall evaluate such data with the assistance of experts in:
a. European Union cyber security;
b. voter fraud;
c. New York state cyber security;
d. cybercrime; and
e. hacking.
§ 4. This act shall take effect immediately.
Reflowed for reading: line numbers and page breaks removed. Cite the official text.
Sponsor's memo
Title of bill
An act establishing a commission to study the European Union's general protection data regulation and the current state of cyber security in the state
Purpose or general idea of bill
Relates to establishing a commission to study cyber security in the state
Summary of provisions
Section 1 states how the commission shall be formed, who will be involved and their qualifications to do so, and their responsibilities/items which to focus on
Section 2 explains that no more than one year after the effective date, a report shall be submitted to the Governor and legislature regarding the progress
Section 3 states that the data will be evaluated with aid and assistance from other experts in related fields
Section states the act shall take effect immediately
Justification
Major data breaches and hacks were exposed. one after another last year. The cyberattacks highlighted the alarming vulnerability of our citizens' personal information online. More tools used by hackers have become public, and it's easier to create sophisticated ways to spread malware or steal data from government or corporate websites. Companies and organizations also frequently fail to patch security flaws in their data and information systems in a timely manner.
In July 2015, cyber criminals penetrated Equifax, one of the largest credit bureaus, and stole the personal data of 145 million people. This incident is considered one of the worst breaches of all time because of the amount of sensitive personal information misappropriated, including Social Security numbers. Equifax revealed the hack more than eight weeks later. The impact could be felt for an unforeseen amount of time because the data could be used for identity theft.
There have been countless examples of cyberattacks on companies and organizations, however, government information systems have also been compromised. For instance, during the presidential primaries in 2016, over 127,000 voter records went missing in Brooklyn, in the Kings County Board of elections.
On May 25, 2018, the European Union will implement the General Data Protection Regulation (GDPR). The regulation was adopted on April 27, 2016, and is intended to strengthen and unify data protection for all individuals within the European Union. The regulation is aimed primarily to give control back to citizens and residents over their personal data
and to simplify the regulatory environment for international businesses by unifying the regulation within the EU.
Our country and state has a patchwork of laws and regulations that addresses cybersecurity, however, we must work to provide a comprehen- sive framework of laws and regulations to protect our citizens and New Yorkers private information online. Additionally, as we move toward the Internet of things and having our divides, homes, cities connected to the Internet, there is a greater risk of cybercrime.
We must protect New Yorkers personal information from online threats, hackers and cyber criminals. This bill will create a commission to study and review the European Union's approach to cyber security. Our goal is to come up with the proper framework to protect New Yorkers personal information online.
Prior legislative history
New Bill
Fiscal implications for state and local governments
To Be Determined
Effective date
Effective immediately
Summaries, headlines and scores are AI-generated from the official bill text. How we score bills. Source: NYS Open Legislation.