Assembly Actions - Lowercase Senate Actions - UPPERCASE |
|
---|---|
Dec 22, 2021 | approval memo.148 signed chap.796 |
Dec 10, 2021 | delivered to governor |
Jun 03, 2021 | returned to senate passed assembly ordered to third reading rules cal.387 substituted for a7612 |
Jun 02, 2021 | referred to governmental operations delivered to assembly passed senate |
Jun 01, 2021 | ordered to third reading cal.1416 committee discharged and committed to rules |
May 24, 2021 | referred to internet and technology |
senate Bill S7019
Signed By GovernorSponsored By
Liz Krueger
(D, WF) 28th Senate District
Archive: Last Bill Status - Signed by Governor
- Introduced
- In Committee
- On Floor Calendar
- Passed Senate
- Passed Assembly
- Delivered to Governor
- Signed by Governor
Your Voice
Actions
Votes
Co-Sponsors
Alessandra Biaggi
(D, WF) 0 Senate District
S7019 (ACTIVE) - Details
- See Assembly Version of this Bill:
- A7612
- Law Section:
- State Technology Law
- Laws Affected:
- Add §209, St Tech L
S7019 (ACTIVE) - Sponsor Memo
BILL NUMBER: S7019 SPONSOR: KRUEGER TITLE OF BILL: An act to amend the state technology law, in relation to the notifica- tion of certain state agencies of a data breach or network security breach PURPOSE: This legislation would require the Office of Information Technology Services to notify, within 24 hours following discovery of a data breach or receiving notice of a data breach or network security breach, the chief information officer or where appropriate the chief information security officer of a state entity with which the office shares data of such breach. SUMMARY OF SPECIFIC PROVISIONS: Section 1 of the bill adds a new section 209 to the state technology law. Subdivision 1 of the new section 209 requires the office, within 24
S7019 (ACTIVE) - Bill Text download pdf
S T A T E O F N E W Y O R K ________________________________________________________________________ 7019 2021-2022 Regular Sessions I N S E N A T E May 24, 2021 ___________ Introduced by Sen. KRUEGER -- (at request of the State Comptroller) -- read twice and ordered printed, and when printed to be committed to the Committee on Internet and Technology AN ACT to amend the state technology law, in relation to the notifica- tion of certain state agencies of a data breach or network security breach THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM- BLY, DO ENACT AS FOLLOWS: Section 1. The state technology law is amended by adding a new section 209 to read as follows: § 209. NOTIFICATION OF DATA BREACH OR NETWORK SECURITY BREACH; SHARED DATA. 1. THE OFFICE SHALL, WITHIN TWENTY-FOUR HOURS FOLLOWING THE DISCOVERY OF A DATA BREACH OR NETWORK SECURITY BREACH OR RECEIVING NOTICE OF A DATA BREACH OR NETWORK SECURITY BREACH, NOTIFY THE CHIEF INFORMATION OFFICER, AND WHERE APPROPRIATE, THE CHIEF INFORMATION SECU- RITY OFFICER, OF ANY STATE ENTITY WITH WHICH IT SHARES DATA, PROVIDES NETWORKED SERVICES OR SHARES A NETWORK CONNECTION WHOSE DATA, SERVICES OR CONNECTION IS OR MAY HAVE BEEN THE SUBJECT OF SUCH BREACH WHETHER OR NOT SUCH DATA WAS, OR IS REASONABLY BELIEVED TO HAVE BEEN, ACQUIRED OR USED BY AN UNAUTHORIZED PERSON. 2. THE OFFICE SHALL, IN ADDITION TO THE PROVISIONS OF SUBDIVISION ONE OF THIS SECTION, NOTIFY THE CHIEF INFORMATION OFFICER, AND WHERE APPRO- PRIATE, THE CHIEF INFORMATION SECURITY OFFICER, OF SUCH STATE ENTITY WITH WHICH IT SHARES DATA, PROVIDES NETWORKED SERVICES OR SHARES A NETWORK CONNECTION AND WHOSE DATA IS OR MAY HAVE BEEN THE SUBJECT OF SUCH BREACH, OF ITS PLAN FOR REMEDIATION OF THE BREACH AND FUTURE PROTECTION OF SUCH DATA AND NETWORK. 3. FOR PURPOSES OF THIS SECTION: (A) "DATA BREACH" SHALL MEAN AN INTENTIONAL OR UNINTENTIONAL INCIDENT WHERE DATA IS DISCLOSED, RELEASED, STOLEN, OR TAKEN WITHOUT THE KNOW- LEDGE OR AUTHORIZATION OF THE DATA'S OWNER OR STEWARD. EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets [ ] is old law to be omitted.
Comments
Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.
Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.