NY State Senate Bill 2021-S6068

Archive: Last Bill Status - In Senate Committee Rules Committee

Introduced
- In Committee Assembly
- In Committee Senate
- On Floor Calendar Assembly
- On Floor Calendar Senate
- Passed Assembly
- Passed Senate
Delivered to Governor
Signed By Governor

Please enter your contact information

First Name

Last Name

Email Address

A valid email address is required.

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

View Actions

	Assembly Actions - Lowercase Senate Actions - UPPERCASE
Jun 03, 2022	committed to rules
May 17, 2022	advanced to third reading
May 16, 2022	2nd report cal.
May 11, 2022	1st report cal.1320
Jan 05, 2022	referred to internet and technology
Apr 02, 2021	referred to internet and technology

Votes

- May 11, 2022 - Internet And Technology Committee Vote
  S6068
  
  7
  
  Aye
  
  0
  
  Nay
  
  0
  
  Aye with Reservations
  
  0
  
  Absent
  
  0
  
  Excused
  
  0
  
  Abstained
  - - Internet And Technology Committee Vote: May 11, 2022
      
      aye (7)
      
      Borrello
      
      Mannion
      
      Oberacker
      
      Parker
      
      Ramos
      
      Savino
      
      Thomas

co-Sponsors

2021-S6068 (ACTIVE) - Details

See Assembly Version of this Bill:: A3900
Current Committee:: Senate Rules
Law Section:: Commissions
Versions Introduced in Other Legislative Sessions:: 2017-2018: S7726, A9013
2019-2020: S4744, A1729
2023-2024: S7907, A2529

2021-S6068 (ACTIVE) - Summary

Establishes a commission to study the European Union's general protection data regulation and the current state of cyber security in the state.

2021-S6068 (ACTIVE) - Sponsor Memo

                                
 
BILL NUMBER: S6068

SPONSOR: PARKER
 
TITLE OF BILL:

An act establishing a commission to study the European Union's general
protection data regulation and the current state of cyber security in
the state

 
PURPOSE OR GENERAL IDEA OF BILL:

Relates to establishing a commission to study cyber security in the
state

 
SUMMARY OF PROVISIONS:

Section 1 states how the commission shall be formed, who will be
involved and their qualifications to do so, and their
responsibilities/items which to focus on

Section 2 explains that no more than one year after the effective date,

a report shall be submitted to the Governor and legislature regarding
the progress

Section 3 states that the data will be evaluated with aid and assistance
from other experts in related fields

Section states the act shall take effect immediately

 
JUSTIFICATION:

Major data breaches and hacks were exposed. One after another last year.
The cyberattacks highlighted the alarming vulnerability of our citizens'
personal information online. More tools used by hackers have become
public, and it's easier to create sophisticated ways to spread malware
or steal data from government or corporate websites.  Companies and
organizations also frequently fail to patch security flaws in their data
and information systems in a timely manner.

In July 2015, cyber criminals penetrated Equifax, one of the largest
credit bureaus, and stole the personal data of 145 million people.  This
incident is considered one of the worst breaches of all time because of
the amount of sensitive personal information misappropriated, including
Social Security numbers. Equifax revealed the hack more than eight Weeks
later. The impact could be felt for an unforeseen amount of time because
the data could be used for identity theft.

There have been countless examples of cyberattacks on companies and
organizations, however, government information systems have also been
compromised. For instance, during the presidential primaries in 2016,
over 127,000 voter records went missing in Brooklyn, in the Kings County
Board of elections.

On May 25, 2018, the European Union will implement the General Data
Protection Regulation (GDPR). The regulation was adopted on April 27,
2016, and is intended to strengthen and unify data protection for all
individuals within the European Union. The regulation is aimed primarily
to give control back to citizens and residents over their personal data

and to simplify the regulatory environment for international businesses
by unifying the regulation within the EU.

Our country and state has a patchwork of laws and regulations that
addresses cybersecurity, however, we must work to provide a comprehen-
sive framework of laws and regulations to protect our citizens and New
Yorkers private information online. Additionally, as we move toward the
Internet of things and having our divides, homes, cities connected to
the Internet, there is a greater risk of cybercrime.

We must protect New Yorkers personal information from online threats,
hackers and cyber criminals. This bill will create a commission to study
and review the European Union's approach to cyber security. Our goal is
to come up with the proper framework to protect New Yorkers personal
information online.

 
PRIOR LEGISLATIVE HISTORY:

2019-20: S.4744 - Referred to Internet and Technology
2017-18: S.7726 - REFERRED TO VETERANS, HOMELAND SECURITY AND MILITARY
AFFAIRS

 
FISCAL IMPLICATIONS:

To Be Determined

 
EFFECTIVE DATE:
Effective immediately

2021-S6068 (ACTIVE) - Bill Text download pdf

                            
 
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   6068
 
                        2021-2022 Regular Sessions
 
                             I N  S E N A T E
 
                               April 2, 2021
                                ___________
 
 Introduced by Sens. PARKER, SEPULVEDA -- read twice and ordered printed,
   and  when  printed  to  be  committed to the Committee on Internet and
   Technology
 
 AN ACT establishing a commission to study the European  Union's  general
   protection  data regulation and the current state of cyber security in
   the state

   THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section  1.  a.  The  office  of  information  technology services, in
 consultation with, and using data  collected  by,  the  state  board  of
 elections,  shall  establish  a commission to study the European Union's
 general protection data regulation and the current state of cyber  secu-
 rity  in  the  state,  to develop legislation to protect people's online
 personal information.
   b. Such commission shall consist of eleven members to be appointed  by
 the  director  of  the  office  of information technology services. Such
 members shall have knowledge of and expertise in cyber  security,  tele-
 communications,  internet  service delivery, public protection, computer
 systems and/or computer networks.
   c. Such commission shall investigate, discuss and make recommendations
 concerning cyber security issues  using  the  European  Union's  general
 protection  data  regulation  as  a  model involving both the public and
 private sectors and the necessary steps New York state  should  take  to
 protect:
   i. critical cyber infrastructure;
   ii. financial systems;
   iii. telecommunications networks;
   iv. electrical grids;
   v. security systems;
   vi. first responder systems and infrastructure;
   vii. physical infrastructure systems;
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.

                                                            LBD03145-01-1

 S. 6068                             2

   viii. transportation systems; and
   ix.  any additional sectors of state government and the private sector
 as the commission deems necessary.
   d. The purpose of such commission shall be to promote the  development
 of  innovative,  actionable policies to ensure that New York state is in
 the forefront of personal cyber security defense.
   e. The members of such commission shall receive  no  compensation  for
 their services, but may receive actual and necessary expenses, and shall
 not be disqualified for holding any other public office or employment by
 means of their service as a member of the commission.
   f. Such commission shall be entitled to request and receive, and shall
 be  provided  with,  such  facilities, resources and data of any agency,
 department, division, board, bureau, commission, or public authority  of
 the  state,  as they may reasonably request, to properly carry out their
 powers, duties and purpose.
   § 2. No later than one year after the effective date of this act,  the
 office  of  information technology services shall submit to the governor
 and the legislature a report  regarding  the  European  Union's  general
 protection  data  regulation  and the current state of cyber security in
 the state.
   § 3. The office of information technology services shall evaluate such
 data with the assistance of experts in:
   a. European Union cyber security;
   b. voter fraud;
   c. New York state cyber security;
   d. cybercrime; and
   e. hacking.
   § 4. This act shall take effect immediately.

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Senate Bill S6068

Sponsored By

Archive: Last Bill Status - In Senate Committee Rules Committee

May 11, 2022 - Internet And Technology Committee Vote

Internet And Technology Committee Vote: May 11, 2022

co-Sponsors

2021-S6068 (ACTIVE) - Details

2021-S6068 (ACTIVE) - Summary

2021-S6068 (ACTIVE) - Sponsor Memo

2021-S6068 (ACTIVE) - Bill Text download pdf

Comments

Senate Bill S6068

Share this bill

Sponsored By

Kevin S. Parker

Archive: Last Bill Status - In Senate Committee Rules Committee

co-Sponsors

Luis R. Sepúlveda

2021-S6068 (ACTIVE) - Details

2021-S6068 (ACTIVE) - Summary

2021-S6068 (ACTIVE) - Sponsor Memo

2021-S6068 (ACTIVE) - Bill Text download pdf

Comments