What's happening
This bill updates New York's computer tampering laws, adds a new first-degree offense for damages over $1 million, and renumbers existing offenses.
Why it matters
Introduces a new, more severe penalty for high-value cybercrime. By creating a first-degree computer tampering offense for damages of $1 million or more, the bill targets large-scale cyberattacks (such as major data breaches or ransomware incidents) with harsher criminal consequences, reflecting the increased risks and financial harm posed to businesses and individuals.
Modernizes legal definitions to better reflect current technology and data practices. The bill updates language regarding who is authorized to access computer material and clarifies intent, which may make it easier to prosecute cases involving unauthorized access or insider threats in today’s digital environment.
Strengthens deterrence and protection for sensitive sectors. By escalating penalties based on the amount of damage caused—including specific reference to medical records and resulting harm—the bill increases protection for critical information infrastructure (like healthcare and financial records), aiming to deter attacks that could jeopardize public safety or personal privacy.
Aligns New York’s legal framework with the growing scale of cyber threats. The restructuring and renumbering of offenses, along with increased penalties, signal the state’s recognition of cybercrime as a serious, evolving threat, potentially serving as a model for other states or prompting greater attention to cybersecurity compliance.
Albany, before your first meeting.
Every bill that moved yesterday, summarized in a sentence and ranked by impact. The Albany Scorecard follows on Sundays.
Free. Unsubscribe in one click. Want alerts on specific bills? Create an account.
Who cares
Headline styles
Tougher Computer Tampering Penalties
Plain English, a few words. Used as the page title.
Sponsors
No co-sponsors yet.
History
- Referred to codes
- Referred to codes
Full text
2 pagesUnderlined is new[Struck] is removedOfficial text on nysenate.gov ↗
STATE OF NEW YORK
229
2019-2020 Regular Sessions
IN SENATE (Prefiled)
January 9, 2019
Introduced by Sen. HOYLMAN -- read twice and ordered printed, and when printed to be committed to the Committee on Codes
AN ACT to amend the penal law, in relation to computer tampering
The People of the State of New York, represented in Senate and Assembly, do enact as follows:
Section 1. Paragraph (c) of subdivision 5 of section 156.00 of the penal law, as amended by chapter 558 of the laws of 2006, is amended to read as follows:
(c) is not and is not intended to be available to anyone other than the person or persons rightfully in possession thereof or selected persons having access thereto with his, her or their consent and which [accords or may accord such rightful possessors an advantage over competitors or other persons who do not have knowledge or the benefit thereof] persons other than those rightly in possession, know or should know that said material is not intended to be available to them.
§ 2. Section 156.20 of the penal law, as amended by chapter 558 of the laws of 2006, is amended to read as follows: § 156.20 Computer tampering in the [fourth] fifth degree.
A person is guilty of computer tampering in the [fourth] fifth degree when he or she uses, causes to be used, or accesses a computer, computer service, or computer network without authorization and he or she intentionally alters in any manner or destroys computer data or a computer program of another person.
Computer tampering in the [fourth] fifth degree is a class A misdemeanor.
§ 3. Section 156.25 of the penal law, as amended by chapter 89 of the laws of 1993, subdivision 2 as amended by chapter 376 of the laws of 1997, is amended to read as follows: § 156.25 Computer tampering in the [third] fourth degree.
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD05444-01-9
S. 229 2
A person is guilty of computer tampering in the [third] fourth degree when he or she commits the crime of computer tampering in the [fourth] fifth degree and:
1. he or she does so with an intent to commit or attempt to commit or further the commission of any felony; or
2. he or she has been previously convicted of any crime under this article or subdivision eleven of section 165.15 of this chapter; or
3. he or she intentionally alters in any manner or destroys computer material; or
4. he or she intentionally alters in any manner or destroys computer data or a computer program so as to cause damages in an aggregate amount exceeding one thousand dollars.
Computer tampering in the [third] fourth degree is a class E felony.
§ 4. Section 156.26 of the penal law, as amended by chapter 590 of the laws of 2008, is amended to read as follows: § 156.26 Computer tampering in the [second] third degree.
A person is guilty of computer tampering in the [second] third degree when he or she commits the crime of computer tampering in the [fourth] fifth degree and he or she intentionally alters in any manner or destroys:
1. computer data or a computer program so as to cause damages in an aggregate amount exceeding three thousand dollars; or
2. computer material that contains records of the medical history or medical treatment of an identified or readily identifiable individual or individuals and as a result of such alteration or destruction, such individual or individuals suffer serious physical injury, and he or she is aware of and consciously disregards a substantial and unjustifiable risk that such serious physical injury may occur.
Computer tampering in the [second] third degree is a class D felony.
§ 5. Section 156.27 of the penal law, as added by chapter 89 of the laws of 1993, is amended to read as follows: § 156.27 Computer tampering in the [first] second degree.
A person is guilty of computer tampering in the [first] second degree when he or she commits the crime of computer tampering in the [fourth] fifth degree and he or she intentionally alters in any manner or destroys computer data or a computer program so as to cause damages in an aggregate amount exceeding fifty thousand dollars.
Computer tampering in the [first] second degree is a class C felony.
§ 6. The penal law is amended by adding a new section 156.28 to read as follows: § 156.28 Computer tampering in the first degree.
A person is guilty of computer tampering in the first degree when he or she commits the crime of computer tampering in the fifth degree and he or she intentionally alters in any manner or destroys computer data or a computer program and thereby causes damages in an aggregate amount of one million dollars or more.
Computer tampering in the first degree is a class B felony.
§ 7. This act shall take effect immediately.
Reflowed for reading: line numbers and page breaks removed. Cite the official text.
Sponsor's memo
Title of bill
An act to amend the penal law, in relation to computer tampering
Purpose or general idea of bill
Establishes a new crime of computer tampering in the fifth degree, and amends the definition and penalty structure for the existing four degrees of computer tampering.
Summary of specific provisions
Section 1 amends paragraph (c) of subdivision 5 of section 156.00 of the penal law to add language clarifying the definition of the crime.
Section 2 amends section 156.20 of the penal law to change computer tampering in the fourth degree to computer tampering in the fifth degree, and establishes that computer tampering in the fifth degree shall be a class A misdemeanor.
Section 3 amends section 156.25 of the penal law to change computer tampering in the third degree to computer tampering in the fourth degree, and establishes that that computer tampering in the fourth degree shall be a class E felony. It also adds "or she" after any instance of the word "he".
Section 4 amends section 156.26 of the penal law to change computer tampering in the second degree to computer tampering in the third degree, and establishes that computer tampering in the third degree shall be a class D felony.
Section 5 amends section 156.27 of the penal law to change computer tampering in the first degree to computer tampering in the second degree, and establishes that computer tampering in the second degree shall be a class C felony. It also adds "or she" after any instance of the word "he".
Section 6 adds a new section 156.28 to the penal law to establish a new definition of computer tampering in the first degree. It establishes that one shall be guilty of computer tampering in the first degree if one commits the crime of computer tampering in the fifth degree and causes one million dollars or more in damages. It also establishes that computer tampering in the first degree shall be a class B felony.
Section 7 provides that the act shall take effect immediately.
Justification
Adopts the recommendation of the New York State White Cone', Crime Task Force ("the Task Force") to change the definition of "computer material" and further gradate the crime of Computer Tampering. In its 2013 report, the Task Force noted the increasing pervasiveness of computer intru- sions, and the serious problems that they can cause to individuals, businesses, and governmental entities. The current definition of "computer material" in the penal law is overly restrictive, and excludes
malicious hacking that isn't related to trade secrets or other compet- itive advantages.
Further, this bill creates a fifth degree of the crime of Computer Tampering, and gradates the degrees of that crime up to a class B felo- ny, consistent with the aggregate damages and penalties for the crime of Grand Larceny.
Prior legislative history
S.0114 of 2017-2018 (Hoylman): Died in Codes S.502 of 2015-2016 (Hoylman): Died in Codes S.7542 of 2014 (Hoylman): Died in Codes
Fiscal implications
None to the state.
Effective date
This act shall take effect immediately.
Summaries, headlines and scores are AI-generated from the official bill text. How we score bills. Source: NYS Open Legislation.