senate Bill S6806A

2021-2022 Legislative Session

Relates to the payment of ransom in the event of a cyber incident or a cyber ransom or ransomware attack

download bill text pdf

Sponsored By

Current Bill Status - In Senate Committee Internet And Technology Committee


  • Introduced
  • In Committee
  • On Floor Calendar
    • Passed Senate
    • Passed Assembly
  • Delivered to Governor
  • Signed/Vetoed by Governor

Your Voice

do you support this bill?

Please enter your contact information

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

view actions (3)
Assembly Actions - Lowercase
Senate Actions - UPPERCASE
Jun 03, 2021 print number 6806a
Jun 03, 2021 amend and recommit to internet and technology
May 18, 2021 referred to internet and technology

S6806 - Details

Current Committee:
Senate Internet And Technology
Law Section:
State Technology Law
Laws Affected:
Add Art 4 §401, St Tech L

S6806 - Summary

Prohibits governmental entities, business entities and health care entities from paying a ransom in the event of a cyber incident or a cyber ransom or ransomware attack.

S6806 - Sponsor Memo

S6806 - Bill Text download pdf

 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   6806
 
                        2021-2022 Regular Sessions
 
                             I N  S E N A T E
 
                               May 18, 2021
                                ___________
 
 Introduced  by  Sen.  SAVINO -- read twice and ordered printed, and when
   printed to be committed to the Committee on Internet and Technology
 
 AN ACT to amend the state technology law, in relation to the payment  of
   ransom  in  the event of a cyber incident or a cyber ransom or ransom-
   ware attack

   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. The state technology law is amended by adding a new article
 4 to read as follows:
                                 ARTICLE IV
                         CYBER SECURITY INCIDENTS
 
 SECTION 401. PAYMENT  OF RANSOM; CYBER INCIDENT, CYBER RANSOM OR RANSOM-
                WARE.
 
   § 401. PAYMENT OF RANSOM; CYBER INCIDENT, CYBER RANSOM OR  RANSOMWARE.
 1. FOR THE PURPOSE OF THIS SECTION:
   A.  "CYBER  INCIDENT"  MEANS THE COMPROMISE OF THE SECURITY, CONFIDEN-
 TIALITY, OR INTEGRITY OF COMPUTERIZED  DATA  DUE  TO  THE  EXFILTRATION,
 MODIFICATION,  OR  DELETION THAT RESULTS IN THE UNAUTHORIZED ACQUISITION
 OF AND ACCESS TO INFORMATION MAINTAINED BY A GOVERNMENTAL ENTITY,  BUSI-
 NESS ENTITY, OR HEALTH CARE ENTITY.
   B.  "CYBER RANSOM OR RANSOMWARE" MEANS A TYPE OF MALWARE THAT ENCRYPTS
 OR LOCKS VALUABLE DIGITAL FILES AND DEMANDS  A  RANSOM  TO  RELEASE  THE
 FILES.
   C.  "GOVERNMENTAL  ENTITY" SHALL MEAN ANY STATE, CITY, TOWN OR VILLAGE
 OR LOCAL DEPARTMENT, BOARD,  BUREAU,  DIVISION,  COMMISSION,  COMMITTEE,
 SCHOOL  DISTRICT,  PUBLIC AUTHORITY, PUBLIC BENEFIT CORPORATION, COUNCIL
 OR OFFICE, INCLUDING ALL ENTITIES DEFINED PURSUANT TO SECTION TWO OF THE
 PUBLIC AUTHORITIES LAW. SUCH TERM SHALL INCLUDE THE STATE UNIVERSITY  OF
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD11518-01-1

S6806A (ACTIVE) - Details

Current Committee:
Senate Internet And Technology
Law Section:
State Technology Law
Laws Affected:
Add Art 4 §401, St Tech L

S6806A (ACTIVE) - Summary

Prohibits governmental entities, business entities and health care entities from paying a ransom in the event of a cyber incident or a cyber ransom or ransomware attack.

S6806A (ACTIVE) - Sponsor Memo

S6806A (ACTIVE) - Bill Text download pdf

 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  6806--A
 
                        2021-2022 Regular Sessions
 
                             I N  S E N A T E
 
                               May 18, 2021
                                ___________
 
 Introduced  by  Sen.  SAVINO -- read twice and ordered printed, and when
   printed to be committed to the Committee on Internet and Technology --
   committee discharged, bill amended, ordered reprinted as  amended  and
   recommitted to said committee
 
 AN  ACT to amend the state technology law, in relation to the payment of
   ransom in the event of a cyber incident or a cyber ransom  or  ransom-
   ware attack
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. The state technology law is amended by adding a new article
 4 to read as follows:
                                 ARTICLE IV
                         CYBER SECURITY INCIDENTS
 
 SECTION 401. PAYMENT OF RANSOM; CYBER INCIDENT, CYBER RANSOM OR  RANSOM-
                WARE.
 
   §  401. PAYMENT OF RANSOM; CYBER INCIDENT, CYBER RANSOM OR RANSOMWARE.
 1. FOR THE PURPOSE OF THIS SECTION:
   A. "CYBER INCIDENT" MEANS THE COMPROMISE OF  THE  SECURITY,  CONFIDEN-
 TIALITY,  OR  INTEGRITY  OF  COMPUTERIZED  DATA DUE TO THE EXFILTRATION,
 MODIFICATION, OR DELETION THAT RESULTS IN THE  UNAUTHORIZED  ACQUISITION
 OF  AND ACCESS TO INFORMATION MAINTAINED BY A GOVERNMENTAL ENTITY, BUSI-
 NESS ENTITY, OR HEALTH CARE ENTITY.
   B. "CYBER RANSOM OR RANSOMWARE" MEANS A TYPE OF MALWARE THAT  ENCRYPTS
 OR  LOCKS  VALUABLE  DIGITAL  FILES  AND DEMANDS A RANSOM TO RELEASE THE
 FILES.
   C. "GOVERNMENTAL ENTITY" SHALL MEAN ANY STATE, CITY, TOWN  OR  VILLAGE
 OR  LOCAL  DEPARTMENT,  BOARD,  BUREAU, DIVISION, COMMISSION, COMMITTEE,
 SCHOOL DISTRICT, PUBLIC AUTHORITY, PUBLIC BENEFIT  CORPORATION,  COUNCIL
 OR OFFICE, INCLUDING ALL ENTITIES DEFINED PURSUANT TO SECTION TWO OF THE
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.

Comments

Open Legislation comments facilitate discussion of New York State legislation. All comments are subject to moderation. Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity or hate speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Comment moderation is generally performed Monday through Friday.

By contributing or voting you agree to the Terms of Participation and verify you are over 13.