Senate Bill S5007

2023-2024 Legislative Session

Establishes the "secure our data act"

download bill text pdf

Sponsored By

Current Bill Status - In Assembly Committee


  • Introduced
    • In Committee Assembly
    • In Committee Senate
    • On Floor Calendar Assembly
    • On Floor Calendar Senate
    • Passed Assembly
    • Passed Senate
  • Delivered to Governor
  • Signed By Governor

Do you support this bill?

Please enter your contact information

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.
Actions
Votes

Bill Amendments

co-Sponsors

2023-S5007 - Details

See Assembly Version of this Bill:
A5736
Current Committee:
Assembly Governmental Operations
Law Section:
State Technology Law
Laws Affected:
Add §210, St Tech L
Versions Introduced in 2021-2022 Legislative Session:
S9005

2023-S5007 - Summary

Establishes the "secure our data act"; relates to state entities preparing for and protecting against a ransomware attack.

2023-S5007 - Sponsor Memo

2023-S5007 - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   5007
 
                        2023-2024 Regular Sessions
 
                             I N  S E N A T E
 
                             February 21, 2023
                                ___________
 
 Introduced  by Sen. GONZALEZ -- read twice and ordered printed, and when
   printed to be committed to the Committee on Internet and Technology
 
 AN ACT to amend the state technology law, in  relation  to  establishing
   the "secure our data act"
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. This act shall be known and may be cited as the "secure our
 data act".
   § 2. Legislative intent. The legislature  finds  that  ransomware  and
 other  malware  attacks have affected the electronically stored personal
 information relating to thousands of people statewide  and  millions  of
 people  nationwide.  The  legislature  also  finds  that  state entities
 receive such personal information from various  sources,  including  the
 data  subjects themselves, other state entities, and the federal govern-
 ment.  In addition, the legislature finds that state entities  use  such
 personal information to make determinations regarding the data subjects.
 The  legislature  further  finds  that New Yorkers deserve to have their
 personal information that is in the possession of a state entity  stored
 in  a  manner  that  will  withstand any attempt by ransomware and other
 malware to alter, change, or encrypt such information.
   Therefore, the legislature enacts the secure our data act  which  will
 guarantee  that  state  entities  will  employ  the proper technology to
 protect the personal information stored as backup information  from  any
 unauthorized alteration or change.
   §  3.  The state technology law is amended by adding a new section 210
 to read as follows:
   § 210. RANSOMWARE AND OTHER MALWARE PROTECTION.  1.  DEFINITIONS.  FOR
 PURPOSES  OF  THIS SECTION, THE FOLLOWING TERMS SHALL HAVE THE FOLLOWING
 MEANINGS:
   (A) "DATA SUBJECT" SHALL MEAN THE PERSON WHO IS  THE  SUBJECT  OF  THE
 PERSONAL INFORMATION.

  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD09002-01-3
              

co-Sponsors

2023-S5007A - Details

See Assembly Version of this Bill:
A5736
Current Committee:
Assembly Governmental Operations
Law Section:
State Technology Law
Laws Affected:
Add §210, St Tech L
Versions Introduced in 2021-2022 Legislative Session:
S9005

2023-S5007A - Summary

Establishes the "secure our data act"; relates to state entities preparing for and protecting against a ransomware attack.

2023-S5007A - Sponsor Memo

2023-S5007A - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  5007--A
 
                        2023-2024 Regular Sessions
 
                             I N  S E N A T E
 
                             February 21, 2023
                                ___________
 
 Introduced by Sens. GONZALEZ, SALAZAR -- read twice and ordered printed,
   and  when  printed  to  be  committed to the Committee on Internet and
   Technology -- reported favorably from said committee and committed  to
   the  Committee  on  Finance  --  committee  discharged,  bill amended,
   ordered reprinted as amended and recommitted to said committee

 AN ACT to amend the state technology law, in  relation  to  establishing
   the "secure our data act"
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. This act shall be known and may be cited as the "secure our
 data act".
   § 2. Legislative intent. The legislature  finds  that  ransomware  and
 other  malware  attacks have affected the electronically stored personal
 information relating to thousands of people statewide  and  millions  of
 people  nationwide.  The  legislature  also  finds  that  state entities
 receive such personal information from various  sources,  including  the
 data  subjects themselves, other state entities, and the federal govern-
 ment.  In addition, the legislature finds that state entities  use  such
 personal information to make determinations regarding the data subjects.
 The  legislature  further  finds  that New Yorkers deserve to have their
 personal information that is in the possession of a state entity  stored
 in  a  manner  that  will  withstand any attempt by ransomware and other
 malware to alter, change, or encrypt such information.
   Therefore, the legislature enacts the secure our data act  which  will
 guarantee  that  state  entities  will  employ  the proper technology to
 protect the personal information stored as backup information  from  any
 unauthorized alteration or change.
   §  3.  The state technology law is amended by adding a new section 210
 to read as follows:
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD09002-02-3
 S. 5007--A                          2
 
              

co-Sponsors

2023-S5007B (ACTIVE) - Details

See Assembly Version of this Bill:
A5736
Current Committee:
Assembly Governmental Operations
Law Section:
State Technology Law
Laws Affected:
Add §210, St Tech L
Versions Introduced in 2021-2022 Legislative Session:
S9005

2023-S5007B (ACTIVE) - Summary

Establishes the "secure our data act"; relates to state entities preparing for and protecting against a ransomware attack.

2023-S5007B (ACTIVE) - Sponsor Memo

2023-S5007B (ACTIVE) - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                  5007--B
     Cal. No. 485
 
                        2023-2024 Regular Sessions
 
                             I N  S E N A T E
 
                             February 21, 2023
                                ___________
 
 Introduced by Sens. GONZALEZ, SALAZAR -- read twice and ordered printed,
   and  when  printed  to  be  committed to the Committee on Internet and
   Technology -- reported favorably from said committee and committed  to
   the  Committee  on  Finance  --  committee  discharged,  bill amended,
   ordered reprinted as amended and  recommitted  to  said  committee  --
   recommitted  to the Committee on Internet and Technology in accordance
   with Senate Rule 6, sec. 8 -- reported favorably from  said  committee
   and  committed  to the Committee on Finance -- reported favorably from
   said committee, ordered to first and second report, ordered to a third
   reading, amended and ordered reprinted, retaining  its  place  in  the
   order of third reading
 
 AN  ACT  to  amend the state technology law, in relation to establishing
   the "secure our data act"
 
   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. This act shall be known and may be cited as the "secure our
 data act".
   §  2.  Legislative  intent.  The legislature finds that ransomware and
 other malware attacks have affected the electronically  stored  personal
 information  relating  to  thousands of people statewide and millions of
 people nationwide.  The  legislature  also  finds  that  state  entities
 receive  such  personal  information from various sources, including the
 data subjects themselves, other state entities, and the federal  govern-
 ment.    In addition, the legislature finds that state entities use such
 personal information to make determinations regarding the data subjects.
 The legislature further finds that New Yorkers  deserve  to  have  their
 personal  information that is in the possession of a state entity stored
 in a manner that will withstand any  attempt  by  ransomware  and  other
 malware to alter, change, or encrypt such information.
   Therefore,  the  legislature enacts the secure our data act which will
 guarantee that state entities  will  employ  the  proper  technology  to
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
              

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.