NY State Senate Bill 2019-S7001

Senate Bill S7001

2019-2020 Legislative Session

Requires the department of education to provide annual notifications to school districts to combat cyber crime

download bill text pdf

Archive: Last Bill Status - In Senate Committee Education Committee

Introduced
- In Committee Assembly
- In Committee Senate
- On Floor Calendar Assembly
- On Floor Calendar Senate
- Passed Assembly
- Passed Senate
Delivered to Governor
Signed By Governor

Please enter your contact information

First Name

Last Name

Email Address

A valid email address is required.

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

View Actions

	Assembly Actions - Lowercase Senate Actions - UPPERCASE
Jan 08, 2020	referred to education

2019-S7001 (ACTIVE) - Details

Current Committee:: Senate Education
Law Section:: Education Law
Laws Affected:: Add §115, Ed L
Versions Introduced in Other Legislative Sessions:: 2021-2022: S348
2023-2024: S2564

2019-S7001 (ACTIVE) - Summary

Requires the department of education to provide annual notifications to school districts to combat cyber crime.

2019-S7001 (ACTIVE) - Sponsor Memo

                                
 
BILL NUMBER: S7001

SPONSOR: KAPLAN
 
TITLE OF BILL:

An act to amend the education law, in relation to annual notifications
to school districts to combat cyber crime

 
PURPOSE:

This legislation would require the State Education Department to annual-
ly notify via email head of data and information technology services in
each school district of a reminder of strategies and best practices that
are most effective in combating cybercrime, and a copy of a National
Institute of Standards and Technology report aimed at improving critical
infrastructure and cybersecurity.

 
SUMMARY OF PROVISIONS:

Section 1 adds a new section 115 to the education law to require annual-
ly on or July first, SED to notify via email the head of information

services of each school district a reminder of the strategies and best
practices that are most effective in combating cybercrime, as well as a
copy of "Framework for Improving Critical Infrastructure Cybersecurity
Version 1.1" published by the National Institute of Standards and Tech-
nology on April 16, 2018.

Section 2 is the effective date.

 
JUSTIFICATION:

The need for improved cybersecurity is real. Hackers who are able to
access schools networks can do irreparable harm. This legislation seeks
to identify and provide best practices to school districts so that they
have a better understanding of what steps they can do to prevent attack.
Malicious attacks or attacks undertaken for ransom pose very real
threats to school districts. In 2019 hackers held two Long Island school
districts hostage, forcing one to pay $88,000 to retrieve student infor-
mation. Best practices can prevent having to pay a ransom by protecting
student information, as well as preparing school districts with know-
ledge of how to react quickly to mitigate an attack.

 
LEGISLATIVE HISTORY:

None.

 
FISCAL IMPLICATIONS:

None.

 
EFFECTIVE DATE:
This act shall take effect July 1 next succeeding.

2019-S7001 (ACTIVE) - Bill Text download pdf

                            
 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   7001
 
                             I N  S E N A T E
 
                                (PREFILED)
 
                              January 8, 2020
                                ___________
 
 Introduced  by  Sen.  KAPLAN -- read twice and ordered printed, and when
   printed to be committed to the Committee on Education
 
 AN ACT to amend the education law, in relation to  annual  notifications
   to school districts to combat cyber crime
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. The education law is amended by adding a new section 115 to
 read as follows:
   § 115. CYBER CRIME NOTIFICATION. 1. ANNUALLY, ON OR BEFORE JULY FIRST,
 THE DEPARTMENT SHALL NOTIFY THE DATA  PROTECTION  OFFICER,  DIRECTOR  OF
 INFORMATION  TECHNOLOGY OR OTHER HEAD OF DATA AND INFORMATION TECHNOLOGY
 SERVICES FOR EACH SCHOOL DISTRICT IN THIS STATE. SUCH NOTIFICATION SHALL
 INCLUDE:
   (A) A REMINDER OF THE STRATEGIES AND  BEST  PRACTICES  THAT  ARE  MOST
 EFFECTIVE IN COMBATTING CYBER CRIME; AND
   (B)  A  COPY  OF  THE "FRAMEWORK FOR IMPROVING CRITICAL INFRASTRUCTURE
 CYBERSECURITY VERSION 1.1" PUBLISHED BY THE NATIONAL INSTITUTE OF STAND-
 ARDS AND TECHNOLOGY ON APRIL 16, 2018.
   2. THE NOTIFICATION REQUIRED BY SUBDIVISION ONE OF THIS SECTION  SHALL
 BE DELIVERED BY EMAIL TO THE APPROPRIATE SCHOOL DISTRICT OFFICER.
   § 2. This act shall take effect immediately.
 
 
 
 
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD13791-01-9

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.