What's happening
This bill creates a commission to study the EU's data protection regulation and New York's cybersecurity, and recommend new policies.
Why it matters
Signals potential for significant changes to data privacy and cybersecurity laws in New York. by explicitly studying and possibly adapting aspects of the EU's General Data Protection Regulation (GDPR), which sets some of the world’s strictest standards for data protection.
Brings together expertise from both public and private sectors. including professionals in cybersecurity, telecommunications, and critical infrastructure—ensuring recommendations are informed by real-world challenges and technological realities.
Targets protection for a wide array of essential systems. (from financial and telecommunication networks to electrical grids and first responder infrastructure), highlighting a broad and proactive approach to defending against cyber threats that could impact daily life and public safety.
Mandates a comprehensive, government-backed report within a year. , which could lay the groundwork for rapid legislative action, increasing the likelihood that New York will proactively address vulnerabilities before a major cybersecurity incident occurs.
Albany, before your first meeting.
Every bill that moved yesterday, summarized in a sentence and ranked by impact. The Albany Scorecard follows on Sundays.
Free. Unsubscribe in one click. Want alerts on specific bills? Create an account.
Who cares
Headline styles
Study State Cyber Security
Plain English, a few words. Used as the page title.
Sponsors
1 Co-sponsor
History
- Referred to internet and technology
- Referred to internet and technology
Companion bill
The same bill in the other chamber. A bill becomes law when one version passes both houses and the governor signs it, so either number can carry it.
Study State Cyber Security
In Assembly Committee · Governmental Operations · Sponsor Clyde Vanel
Full text
2 pagesUnderlined is new[Struck] is removedOfficial text on nysenate.gov ↗
STATE OF NEW YORK
4744
2019-2020 Regular Sessions
IN SENATE
March 22, 2019
Introduced by Sens. PARKER, SEPULVEDA -- read twice and ordered printed, and when printed to be committed to the Committee on Internet and Technology
AN ACT establishing a commission to study the European Union's general protection data regulation and the current state of cyber security in the state
The People of the State of New York, represented in Senate and Assembly, do enact as follows:
Section 1. a. The office of information technology services, in consultation with, and using data collected by, the state board of elections, shall establish a commission to study the European Union's general protection data regulation and the current state of cyber security in the state, to develop legislation to protect people's online personal information.
b. Such commission shall consist of eleven members to be appointed by the director of the office of information technology services. Such members shall have knowledge of and expertise in cyber security, telecommunications, internet service delivery, public protection, computer systems and/or computer networks.
c. Such commission shall investigate, discuss and make recommendations concerning cyber security issues using the European Union's general protection data regulation as a model involving both the public and private sectors and the necessary steps New York state should take to protect:
i. critical cyber infrastructure;
ii. financial systems;
iii. telecommunications networks;
iv. electrical grids;
v. security systems;
vi. first responder systems and infrastructure;
vii. physical infrastructure systems;
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD01280-01-9
S. 4744 2
viii. transportation systems; and
ix. any additional sectors of state government and the private sector as the commission deems necessary.
d. The purpose of such commission shall be to promote the development of innovative, actionable policies to ensure that New York state is in the forefront of personal cyber security defense.
e. The members of such commission shall receive no compensation for their services, but may receive actual and necessary expenses, and shall not be disqualified for holding any other public office or employment by means of their service as a member of the commission.
f. Such commission shall be entitled to request and receive, and shall be provided with, such facilities, resources and data of any agency, department, division, board, bureau, commission, or public authority of the state, as they may reasonably request, to properly carry out their powers, duties and purpose.
§ 2. No later than one year after the effective date of this act, the office of information technology services shall submit to the governor and the legislature a report regarding the European Union's general protection data regulation and the current state of cyber security in the state.
§ 3. The office of information technology services shall evaluate such data with the assistance of experts in:
a. European Union cyber security;
b. voter fraud;
c. New York state cyber security;
d. cybercrime; and
e. hacking.
§ 4. This act shall take effect immediately.
Reflowed for reading: line numbers and page breaks removed. Cite the official text.
Sponsor's memo
Title of bill
An act establishing a commission to study the European Union's general protection data regulation and the current state of cyber security in the state
Purpose or general idea of bill
Relates to establishing a commission to study cyber security in the state
Summary of provisions
Section 1 states how the commission shall be formed, who will be involved and their qualifications to do so, and their responsibilities/items which to focus on
Section 2 explains that no more than one year after the effective date, a report shall be submitted to the Governor and legislature regarding the progress
Section 3 states that the data will be evaluated with aid and assistance from other experts in related fields
Section states the act shall take effect immediately
Justification
Major data breaches and hacks were exposed. One after another last year. The cyberattacks highlighted the alarming vulnerability of our citizens' personal information online. More tools used by hackers have become public, and it's easier to create sophisticated ways to spread malware or steal data from government or corporate websites. Companies and organizations also frequently fail to patch security flaws in their data and information systems in a timely manner.
In July 2015, cyber criminals penetrated Equifax, one of the largest credit bureaus, and stole the personal data of 145 million people. This incident is considered one of the worst breaches of all time because of the amount of sensitive personal information misappropriated, including Social Security numbers. Equifax revealed the hack more than eight weeks later. The impact could be felt for an unforeseen amount of time because the data could be used for identity theft.
There have been countless examples of cyberattacks on companies and organizations, however, government information systems have also been compromised. For instance, during the presidential primaries in 2016, over 127,000 voter records went missing in Brooklyn, in the Kings County Board of elections.
On May 25, 2018, the European Union will implement the General Data Protection Regulation (GDPR). The regulation was adopted on April 27, 2016, and is intended to strengthen and unify data protection for all individuals within the European Union. The regulation is aimed primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international businesses by unifying the regulation within the EU.
Our country and state has a patchwork of laws and regulations that addresses cybersecurity, however, we must work to provide a comprehen- sive framework of laws and regulations to protect our citizens and New Yorkers private information online. Additionally, as we move toward the Internet of things and having our divides, homes, cities connected to the Internet, there is a greater risk of cybercrime.
We must protect New Yorkers personal information from online threats, hackers and cyber criminals. This bill will create a commission to study and review the European Union's approach to cyber security. Our goal is to come up with the proper framework to protect New Yorkers personal information online.
Prior legislative history
2017-18 : S7726 - REFERRED TO VETERANS, HOMELAND SECURITY AND MILITARY AFFAIRS
Fiscal implications for state and local governments
To Be Determined
Effective date
Effective immediately
Summaries, headlines and scores are AI-generated from the official bill text. How we score bills. Source: NYS Open Legislation.