S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   1729
 
                        2019-2020 Regular Sessions
 
                           I N  A S S E M B L Y
 
                             January 16, 2019
                                ___________
 
 Introduced by M. of A. VANEL, DINOWITZ, ABINANTI, GALEF, MOSLEY, CAHILL,
   HYNDMAN,  GLICK,  BARRON,  PICHARDO,  RAIA, MONTESANO, BLAKE, WALLACE,
   BICHOTTE, RIVERA, GOTTFRIED, D'URSO, TAYLOR, HUNTER,  THIELE,  ARROYO,
   COLTON, LAWRENCE, COOK, LIFTON, LUPARDO -- Multi-Sponsored by -- M. of
   A.    GIGLIO, SIMON, WRIGHT -- read once and referred to the Committee
   on Governmental Operations
 
 AN ACT establishing a commission to study the European  Union's  general
   protection  data regulation and the current state of cyber security in
   the state
 
   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section  1.  a.  The  office  of  information  technology services, in
 consultation with, and using data  collected  by,  the  state  board  of
 elections,  shall  establish  a commission to study the European Union's
 general protection data regulation and the current state of cyber  secu-
 rity  in  the  state,  to develop legislation to protect people's online
 personal information.
   b. Such commission shall consist of eleven members to be appointed  by
 the  director  of  the  office  of information technology services. Such
 members shall have knowledge of and expertise in cyber  security,  tele-
 communications,  internet  service delivery, public protection, computer
 systems and/or computer networks.
   c. Such commission shall investigate, discuss and make recommendations
 concerning cyber security issues  using  the  European  Union's  general
 protection  data  regulation  as  a  model involving both the public and
 private sectors and the necessary steps New York state  should  take  to
 protect:
   i. critical cyber infrastructure;
   ii. financial systems;
   iii. telecommunications networks;
   iv. electrical grids;
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
              

                                                            LBD01280-01-9

 A. 1729                             2
 
   v. security systems;
   vi. first responder systems and infrastructure;
   vii. physical infrastructure systems;
   viii. transportation systems; and
   ix.  any additional sectors of state government and the private sector
 as the commission deems necessary.
   d. The purpose of such commission shall be to promote the  development
 of  innovative,  actionable policies to ensure that New York state is in
 the forefront of personal cyber security defense.
   e. The members of such commission shall receive  no  compensation  for
 their services, but may receive actual and necessary expenses, and shall
 not be disqualified for holding any other public office or employment by
 means of their service as a member of the commission.
   f. Such commission shall be entitled to request and receive, and shall
 be  provided  with,  such  facilities, resources and data of any agency,
 department, division, board, bureau, commission, or public authority  of
 the  state,  as they may reasonably request, to properly carry out their
 powers, duties and purpose.
   § 2. No later than one year after the effective date of this act,  the
 office  of  information technology services shall submit to the governor
 and the legislature a report  regarding  the  European  Union's  general
 protection  data  regulation  and the current state of cyber security in
 the state.
   § 3. The office of information technology services shall evaluate such
 data with the assistance of experts in:
   a. European Union cyber security;
   b. voter fraud;
   c. New York state cyber security;
   d. cybercrime; and
   e. hacking.
   § 4. This act shall take effect immediately.