S T A T E O F N E W Y O R K
________________________________________________________________________
7726
I N S E N A T E
February 13, 2018
___________
Introduced by Sen. PARKER -- read twice and ordered printed, and when
printed to be committed to the Committee on Veterans, Homeland Securi-
ty and Military Affairs
AN ACT establishing a commission to study the European Union's general
protection data regulation and the current state of cyber security in
the state
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. a. The office of information technology services, in
consultation with, and using data collected by, the state board of
elections, shall establish a commission to study the European Union's
general protection data regulation and the current state of cyber secu-
rity in the state, to develop legislation to protect people's online
personal information.
b. Such commission shall consist of eleven members to be appointed by
the director of the office of information technology services. Such
members shall have knowledge of and expertise in cyber security, tele-
communications, internet service delivery, public protection, computer
systems and/or computer networks.
c. Such commission shall investigate, discuss and make recommendations
concerning cyber security issues using the European Union's general
protection data regulation as a model involving both the public and
private sectors and the necessary steps New York state should take to
protect:
i. critical cyber infrastructure;
ii. financial systems;
iii. telecommunications networks;
iv. electrical grids;
v. security systems;
vi. first responder systems and infrastructure;
vii. physical infrastructure systems;
viii. transportation systems; and
ix. any additional sectors of state government and the private sector
as the commission deems necessary.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD14167-01-8
S. 7726 2
d. The purpose of such commission shall be to promote the development
of innovative, actionable policies to ensure that New York state is in
the forefront of personal cyber security defense.
e. The members of such commission shall receive no compensation for
their services, but may receive actual and necessary expenses, and shall
not be disqualified for holding any other public office or employment by
means of their service as a member of the commission.
f. Such commission shall be entitled to request and receive, and shall
be provided with, such facilities, resources and data of any agency,
department, division, board, bureau, commission, or public authority of
the state, as they may reasonably request, to properly carry out their
powers, duties and purpose.
§ 2. No later than one year after the effective date of this act, the
office of information technology services shall submit to the governor
and the legislature a report regarding the European Union's general
protection data regulation and the current state of cyber security in
the state.
§ 3. The office of information technology services shall evaluate such
data with the assistance of experts in:
a. European Union cyber security;
b. voter fraud;
c. New York state cyber security;
d. cybercrime; and
e. hacking.
§ 4. This act shall take effect immediately.