NY State Senate Bill 2023-S7907

Current Bill Status - In Senate Committee Internet And Technology Committee

Introduced
- In Committee Assembly
- In Committee Senate
- On Floor Calendar Assembly
- On Floor Calendar Senate
- Passed Assembly
- Passed Senate
Delivered to Governor
Signed By Governor

Please enter your contact information

First Name

Last Name

Email Address

A valid email address is required.

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

View Actions

	Assembly Actions - Lowercase Senate Actions - UPPERCASE
Jan 03, 2024	referred to internet and technology

co-Sponsors

2023-S7907 (ACTIVE) - Details

See Assembly Version of this Bill:: A2529
Current Committee:: Senate Internet And Technology
Law Section:: Commissions
Versions Introduced in Other Legislative Sessions:: 2017-2018: S7726, A9013
2019-2020: S4744, A1729
2021-2022: S6068, A3900

2023-S7907 (ACTIVE) - Summary

Establishes a commission to study the European Union's general protection data regulation and the current state of cyber security in the state.

2023-S7907 (ACTIVE) - Sponsor Memo

                                 
BILL NUMBER: S7907

SPONSOR: PARKER
 
TITLE OF BILL:

An act establishing a commission to study the European Union's general
protection data regulation and the current state of cyber security in
the state

 
PURPOSE OR GENERAL IDEA OF BILL:

Relates to establishing a commission to study cyber security in the
state

 
SUMMARY OF PROVISIONS:

Section 1 states how the commission shall be formed, who will be
involved and their qualifications to do so, and their
responsibilities/items which to focus on/

Section 2 explains that no more than one year after the effective date,
a report shall be submitted to the Governor and legislature regarding

the progress

Section 3 states that the data will be evaluated with aid and assistance
from other experts in related fields

Section 4 states the act shall take effect immediately

 
JUSTIFICATION:

Major data breaches and hacks were exposed. One after another last year.
The cyberattacks highlighted the alarming vulnerability of our citizens'
personal information online. More tools used by hackers have become
public, and it's easier to create sophisticated ways to spread malware
or steal data from government or corporate websites.  Companies and
organizations also frequently fail to patch security flaws in their data
and information systems in a timely manner.

In July 2015, cyber criminals penetrated Equifax, one of the largest
credit bureaus, and stole the personal data of 145 million people.  This
incident is considered one of the worst breaches of all time because of
the amount of sensitive personal information misappropriated, including
Social Security numbers. Equifax revealed the hack more than eight Weeks
later. The impact could be felt for an unforeseen amount of time because
the data could be used for identity theft.

There have been countless examples of cyberattacks on companies and
organizations, however, government information systems have also been
compromised. For instance, during the presidential primaries in 2016,
over 127,000 voter records went missing in Brooklyn, in the Kings County
Board of elections.

On May 25, 2018, the European Union will implement the General Data
Protection Regulation (GDPR). The regulation was adopted on April 27,
2016, and is intended to strengthen and unify data protection for all
individuals within the European Union. The regulation is aimed primarily
to give control back to citizens and residents over their personal data

and to simplify the regulatory environment for international businesses
by unifying the regulation within the EU.

Our country and state has a patchwork of laws and regulations that
addresses cybersecurity, however, we must work to provide a comprehen-
sive framework of laws and regulations to protect our citizens and New
Yorkers private information online. Additionally, as we move toward the
Internet of things and having our divides, homes, cities connected to
the Internet, there is a greater risk of cybercrime.

We must protect New Yorkers personal information from online threats,
hackers and cyber criminals. This bill will create a commission to study
and review the European Union's approach to cyber security. Our goal is
to come up with the proper framework to protect New Yorkers personal
information online.

 
PRIOR LEGISLATIVE HISTORY:

2021-22: S.6068 - Committed to Rules 2019-20: S.4744 - Referred to
Internet and Technology 2017-18: S.7726 - REFERRED TO VETERANS, HOMELAND
SECURITY AND MILITARY AFFAIRS

 
FISCAL IMPLICATIONS:

To Be Determined

 
EFFECTIVE DATE:
This act shall take effect immediately.

2023-S7907 (ACTIVE) - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   7907
 
                             I N  S E N A T E
 
                              January 3, 2024
                                ___________
 
 Introduced by Sens. PARKER, SEPULVEDA -- read twice and ordered printed,
   and  when  printed  to  be  committed to the Committee on Internet and
   Technology
 
 AN ACT establishing a commission to study the European  Union's  general
   protection  data regulation and the current state of cyber security in
   the state
 
   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section  1.  a.  The  office  of  information  technology services, in
 consultation with, and using data  collected  by,  the  state  board  of
 elections,  shall  establish  a commission to study the European Union's
 general protection data regulation and the current state of cyber  secu-
 rity  in  the  state,  to develop legislation to protect people's online
 personal information.
   b. Such commission shall consist of eleven members to be appointed  by
 the  director  of  the  office  of information technology services. Such
 members shall have knowledge of and expertise in cyber  security,  tele-
 communications,  internet  service delivery, public protection, computer
 systems and/or computer networks.
   c. Such commission shall investigate, discuss and make recommendations
 concerning cyber security issues  using  the  European  Union's  general
 protection  data  regulation  as  a  model involving both the public and
 private sectors and the necessary steps New York state  should  take  to
 protect:
   i. critical cyber infrastructure;
   ii. financial systems;
   iii. telecommunications networks;
   iv. electrical grids;
   v. security systems;
   vi. first responder systems and infrastructure;
   vii. physical infrastructure systems;
   viii. transportation systems; and
   ix.  any additional sectors of state government and the private sector
 as the commission deems necessary.
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.

                                                            LBD06219-01-3
 S. 7907                             2
 
   d. The purpose of such commission shall be to promote the  development
 of  innovative,  actionable policies to ensure that New York state is in
 the forefront of personal cyber security defense.
   e.  The  members  of such commission shall receive no compensation for
 their services, but may receive actual and necessary expenses, and shall
 not be disqualified for holding any other public office or employment by
 means of their service as a member of the commission.
   f. Such commission shall be entitled to request and receive, and shall
 be provided with, such facilities, resources and  data  of  any  agency,
 department,  division, board, bureau, commission, or public authority of
 the state, as they may reasonably request, to properly carry  out  their
 powers, duties and purpose.
   §  2. No later than one year after the effective date of this act, the
 office of information technology services shall submit to  the  governor
 and  the  legislature  a  report  regarding the European Union's general
 protection data regulation and the current state of  cyber  security  in
 the state.
   § 3. The office of information technology services shall evaluate such
 data with the assistance of experts in:
   a. European Union cyber security;
   b. voter fraud;
   c. New York state cyber security;
   d. cybercrime; and
   e. hacking.
   § 4. This act shall take effect immediately.

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Senate Bill S7907

Sponsored By

Current Bill Status - In Senate Committee Internet And Technology Committee

co-Sponsors

2023-S7907 (ACTIVE) - Details

2023-S7907 (ACTIVE) - Summary

2023-S7907 (ACTIVE) - Sponsor Memo

2023-S7907 (ACTIVE) - Bill Text download pdf

Comments

Senate Bill S7907

Share this bill

Sponsored By

Kevin S. Parker

Current Bill Status - In Senate Committee Internet And Technology Committee

co-Sponsors

Luis R. Sepúlveda

2023-S7907 (ACTIVE) - Details

2023-S7907 (ACTIVE) - Summary

2023-S7907 (ACTIVE) - Sponsor Memo

2023-S7907 (ACTIVE) - Bill Text download pdf

Comments