senate Bill S5007A

2023-2024 Legislative Session

Establishes the "secure our data act"

download bill text pdf

Sponsored By

Current Bill Status - On Floor Calendar


  • Introduced
  • In Committee
  • On Floor Calendar
    • Passed Senate
    • Passed Assembly
  • Delivered to Governor
  • Signed/Vetoed by Governor

Your Voice

do you support this bill?

Please enter your contact information

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

view actions (6)
Assembly Actions - Lowercase
Senate Actions - UPPERCASE
May 22, 2023 ordered to third reading cal.1097
committee discharged and committed to rules
Apr 17, 2023 print number 5007a
Apr 17, 2023 amend and recommit to finance
Feb 28, 2023 reported and committed to finance
Feb 21, 2023 referred to internet and technology

Votes

view votes

May 22, 2023 - Rules committee Vote

S5007A
18
0
committee
18
Aye
0
Nay
3
Aye with Reservations
0
Absent
0
Excused
0
Abstained
show Rules committee vote details

Feb 28, 2023 - Internet and Technology committee Vote

S5007
6
0
committee
6
Aye
0
Nay
1
Aye with Reservations
0
Absent
0
Excused
0
Abstained
show committee vote details

Committee Vote: Feb 28, 2023

aye wr (1)

Co-Sponsors

S5007 - Details

See Assembly Version of this Bill:
A5736
Law Section:
State Technology Law
Laws Affected:
Add §210, St Tech L
Versions Introduced in 2021-2022 Legislative Session:
S9005

S5007 - Summary

Establishes the "secure our data act"; relates to state entities preparing for and protecting against a ransomware attack.

S5007 - Sponsor Memo

S5007 - Bill Text download pdf

 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   5007
 
                        2023-2024 Regular Sessions
 
                             I N  S E N A T E
 
                             February 21, 2023
                                ___________
 
 Introduced  by Sen. GONZALEZ -- read twice and ordered printed, and when
   printed to be committed to the Committee on Internet and Technology
 
 AN ACT to amend the state technology law, in  relation  to  establishing
   the "secure our data act"
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. This act shall be known and may be cited as the "secure our
 data act".
   § 2. Legislative intent. The legislature  finds  that  ransomware  and
 other  malware  attacks have affected the electronically stored personal
 information relating to thousands of people statewide  and  millions  of
 people  nationwide.  The  legislature  also  finds  that  state entities
 receive such personal information from various  sources,  including  the
 data  subjects themselves, other state entities, and the federal govern-
 ment.  In addition, the legislature finds that state entities  use  such
 personal information to make determinations regarding the data subjects.
 The  legislature  further  finds  that New Yorkers deserve to have their
 personal information that is in the possession of a state entity  stored
 in  a  manner  that  will  withstand any attempt by ransomware and other
 malware to alter, change, or encrypt such information.
   Therefore, the legislature enacts the secure our data act  which  will
 guarantee  that  state  entities  will  employ  the proper technology to
 protect the personal information stored as backup information  from  any
 unauthorized alteration or change.
   §  3.  The state technology law is amended by adding a new section 210
 to read as follows:
   § 210. RANSOMWARE AND OTHER MALWARE PROTECTION.  1.  DEFINITIONS.  FOR
 PURPOSES  OF  THIS SECTION, THE FOLLOWING TERMS SHALL HAVE THE FOLLOWING
 MEANINGS:
   (A) "DATA SUBJECT" SHALL MEAN THE PERSON WHO IS  THE  SUBJECT  OF  THE
 PERSONAL INFORMATION.

  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD09002-01-3

Co-Sponsors

S5007A (ACTIVE) - Details

See Assembly Version of this Bill:
A5736
Law Section:
State Technology Law
Laws Affected:
Add §210, St Tech L
Versions Introduced in 2021-2022 Legislative Session:
S9005

S5007A (ACTIVE) - Summary

Establishes the "secure our data act"; relates to state entities preparing for and protecting against a ransomware attack.

S5007A (ACTIVE) - Sponsor Memo

S5007A (ACTIVE) - Bill Text download pdf

 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  5007--A
 
                        2023-2024 Regular Sessions
 
                             I N  S E N A T E
 
                             February 21, 2023
                                ___________
 
 Introduced by Sens. GONZALEZ, SALAZAR -- read twice and ordered printed,
   and  when  printed  to  be  committed to the Committee on Internet and
   Technology -- reported favorably from said committee and committed  to
   the  Committee  on  Finance  --  committee  discharged,  bill amended,
   ordered reprinted as amended and recommitted to said committee

 AN ACT to amend the state technology law, in  relation  to  establishing
   the "secure our data act"
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. This act shall be known and may be cited as the "secure our
 data act".
   § 2. Legislative intent. The legislature  finds  that  ransomware  and
 other  malware  attacks have affected the electronically stored personal
 information relating to thousands of people statewide  and  millions  of
 people  nationwide.  The  legislature  also  finds  that  state entities
 receive such personal information from various  sources,  including  the
 data  subjects themselves, other state entities, and the federal govern-
 ment.  In addition, the legislature finds that state entities  use  such
 personal information to make determinations regarding the data subjects.
 The  legislature  further  finds  that New Yorkers deserve to have their
 personal information that is in the possession of a state entity  stored
 in  a  manner  that  will  withstand any attempt by ransomware and other
 malware to alter, change, or encrypt such information.
   Therefore, the legislature enacts the secure our data act  which  will
 guarantee  that  state  entities  will  employ  the proper technology to
 protect the personal information stored as backup information  from  any
 unauthorized alteration or change.
   §  3.  The state technology law is amended by adding a new section 210
 to read as follows:
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD09002-02-3
 S. 5007--A                          2
 

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.