S T A T E O F N E W Y O R K
________________________________________________________________________
3336
2011-2012 Regular Sessions
I N A S S E M B L Y
January 24, 2011
___________
Introduced by M. of A. MILLMAN -- read once and referred to the Commit-
tee on Education
AN ACT to amend the education law, in relation to requiring that any
on-line or web-based applications utilized by the department of educa-
tion in connection with application for licensure or certification or
to verify the result of background checks comply with the Cyber Secu-
rity Policy of the New York State Office of Cyber Security and Crit-
ical Infrastructure Coordination and with the Payment Card Industry
Data Security Standard
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. The education law is amended by adding a new section 141 to
read as follows:
S 141. COMPLIANCE WITH CYBER SECURITY REQUIREMENTS. 1. NOTWITHSTANDING
ANY PROVISION OF LAW TO THE CONTRARY, ANY ON-LINE OR WEB-BASED APPLICA-
TIONS UTILIZED BY THE DEPARTMENT FOR PURPOSES OF ALLOWING PERSONS TO
APPLY FOR, RENEW, PAY FEES OR CHARGES FOR OR CHECK THE STATUS OF ANY
LICENSE OR CERTIFICATION ISSUED PURSUANT TO THE PROVISIONS OF THIS CHAP-
TER, OR TO CHECK THE STATUS OF ANY BACKGROUND CHECKS REQUIRED BY THE
PROVISIONS OF THIS CHAPTER, SHALL COMPLY IN ALL RESPECTS WITH REQUIRE-
MENTS OF:
A. THE CYBER SECURITY POLICY OF THE NEW YORK STATE OFFICE OF CYBER
SECURITY AND CRITICAL INFRASTRUCTURE COORDINATION; AND
B. THE PAYMENT CARD INDUSTRY DATA SECURITY STANDARD REQUIREMENTS
APPLICABLE TO ENTITIES THAT PROCESS, TRANSMIT OR STORE PAYMENT CARD
HOLDER INFORMATION.
2. ALL ON-LINE OR WEB-BASED APPLICATIONS UTILIZED BY THE DEPARTMENT
FOR THE PURPOSES DESCRIBED IN SUBDIVISION ONE OF THIS SECTION SHALL BE
REVIEWED ANNUALLY BY THE DEPARTMENT TO ASSURE THAT SUCH ON-LINE OR WEB-
BASED APPLICATIONS REMAIN IN COMPLIANCE WITH THE PROVISIONS OF THE CYBER
SECURITY POLICY AND THE PAYMENT CARD INDUSTRY DATA SECURITY STANDARD, AS
UPDATED PERIODICALLY.
S 2. This act shall take effect immediately.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD08302-01-1