What's happening
This bill requires annual notifications to New York school districts about cyber crime prevention strategies and cybersecurity best practices.
Why it matters
Raises awareness and accountability. By mandating annual notifications, the bill ensures that school district IT leaders are regularly reminded of their responsibilities to protect sensitive student and staff data, reducing the risk of breaches due to oversight or outdated practices.
Promotes up-to-date cybersecurity standards. Requiring distribution of the "Framework for Improving Critical Infrastructure Cybersecurity" from NIST (a widely respected national standard) helps align schools with best-in-class strategies, encouraging consistent and modern approaches across districts.
Supports proactive risk management. Timely and repeated delivery of cybersecurity guidance can help school districts identify and address vulnerabilities before incidents occur, potentially saving costs and reputational harm tied to cyber attacks.
Ensures direct communication. Delivering notifications by email to designated tech leaders in each district increases the likelihood that crucial information reaches the appropriate decision-makers, fostering more immediate and effective action.
Albany, before your first meeting.
Every bill that moved yesterday, summarized in a sentence and ranked by impact. The Albany Scorecard follows on Sundays.
Free. Unsubscribe in one click. Want alerts on specific bills? Create an account.
Who cares
Headline styles
Notify Schools on Cyber Crime
Plain English, a few words. Used as the page title.
Sponsors
Senator · Senate District 7
No co-sponsors yet.
History
- Referred to education
Full text
1 pageUnderlined is new[Struck] is removedOfficial text on nysenate.gov ↗
STATE OF NEW YORK
7001
IN SENATE (Prefiled)
January 8, 2020
Introduced by Sen. KAPLAN -- read twice and ordered printed, and when printed to be committed to the Committee on Education
AN ACT to amend the education law, in relation to annual notifications to school districts to combat cyber crime
The People of the State of New York, represented in Senate and Assembly, do enact as follows:
Section 1. The education law is amended by adding a new section 115 to read as follows:
§ 115. Cyber crime notification. 1. Annually, on or before July first, the department shall notify the data protection officer, director of information technology or other head of data and information technology services for each school district in this state. Such notification shall include:
(a) a reminder of the strategies and best practices that are most effective in combatting cyber crime; and
(b) a copy of the "Framework for Improving Critical Infrastructure Cybersecurity Version 1.1" published by the National Institute of Standards and Technology on April 16, 2018.
2. The notification required by subdivision one of this section shall be delivered by email to the appropriate school district officer.
§ 2. This act shall take effect immediately.
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD13791-01-9
Reflowed for reading: line numbers and page breaks removed. Cite the official text.
Sponsor's memo
Title of bill
An act to amend the education law, in relation to annual notifications to school districts to combat cyber crime
Purpose
This legislation would require the State Education Department to annual- ly notify via email head of data and information technology services in each school district of a reminder of strategies and best practices that are most effective in combating cybercrime, and a copy of a National Institute of Standards and Technology report aimed at improving critical infrastructure and cybersecurity.
Summary of provisions
Section 1 adds a new section 115 to the education law to require annual- ly on or July first, SED to notify via email the head of information services of each school district a reminder of the strategies and best practices that are most effective in combating cybercrime, as well as a copy of "Framework for Improving Critical Infrastructure Cybersecurity Version 1.1" published by the National Institute of Standards and Tech- nology on April 16, 2018.
Section 2 is the effective date.
Justification
The need for improved cybersecurity is real. Hackers who are able to access schools networks can do irreparable harm. This legislation seeks to identify and provide best practices to school districts so that they have a better understanding of what steps they can do to prevent attack. Malicious attacks or attacks undertaken for ransom pose very real threats to school districts. In 2019 hackers held two Long Island school districts hostage, forcing one to pay $88,000 to retrieve student infor- mation. Best practices can prevent having to pay a ransom by protecting student information, as well as preparing school districts with know- ledge of how to react quickly to mitigate an attack.
Legislative history
None.
Fiscal implications
None.
Effective date
This act shall take effect July 1 next succeeding.
Summaries, headlines and scores are AI-generated from the official bill text. How we score bills. Source: NYS Open Legislation.