NY State Senate Bill 2023-S2564

Senate Bill S2564

2023-2024 Legislative Session

Requires the department of education to provide annual notifications to school districts to combat cyber crime

download bill text pdf

Current Bill Status - In Senate Committee Education Committee

Introduced
- In Committee Assembly
- In Committee Senate
- On Floor Calendar Assembly
- On Floor Calendar Senate
- Passed Assembly
- Passed Senate
Delivered to Governor
Signed By Governor

Please enter your contact information

First Name

Last Name

Email Address

A valid email address is required.

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.

Actions

View Actions

	Assembly Actions - Lowercase Senate Actions - UPPERCASE
Jan 03, 2024	referred to education
Jan 23, 2023	referred to education

2023-S2564 (ACTIVE) - Details

Current Committee:: Senate Education
Law Section:: Education Law
Laws Affected:: Add §115, Ed L
Versions Introduced in Other Legislative Sessions:: 2019-2020: S7001
2021-2022: S348

2023-S2564 (ACTIVE) - Summary

Requires the department of education to provide annual notifications to school districts to combat cyber crime.

2023-S2564 (ACTIVE) - Sponsor Memo

                                 
BILL NUMBER: S2564

SPONSOR: COONEY
 
TITLE OF BILL:

An act to amend the education law, in relation to annual notifications
to school districts to combat cyber crime

 
PURPOSE:

This legislation would require the State Education Department to annual-
ly notify via email head of data and information technology services in
each school district of a reminder of strategies and best practices that
are most effective in combating cybercrime, and a copy of a National
Institute of Standards and Technology report aimed at improving critical
infrastructure and cybersecurity.

 
SUMMARY OF PROVISIONS:

Section 1 adds a new section 115 to the education law to require annual-
ly on or July first, SED to notify via email the head of information
services of each school district a reminder of the strategies and best

practices that are most effective in combating cybercrime, as well as a
copy of "Framework for Improving Critical Infrastructure Cybersecurity
Version 1.1" published by the National Institute of Standards and Tech-
nology on April 16, 2018.

Section 2 is the effective date.

 
JUSTIFICATION:

The need for improved cybersecurity is real. Hackers who are able to
access schools networks can do irreparable harm. This legislation seeks
to identify and provide best practices to school districts so that they
have a better understanding of what steps they can do to prevent attack.
Malicious attacks or attacks undertaken for ransom pose very real
threats to school districts. In 2019 hackers held two Long Island school
districts hostage, forcing one to pay $88,000 to retrieve student infor-
mation. Best practices can prevent having to pay a ransom by protecting
student information, as well as preparing school districts with know-
ledge of how to react quickly to mitigate an attack.

 
LEGISLATIVE HISTORY:

2021-22: S.348 (Kaplan)

 
FISCAL IMPLICATIONS:

None.

 
EFFECTIVE DATE:
This act shall take effect immediately.

2023-S2564 (ACTIVE) - Bill Text download pdf

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                   2564
 
                        2023-2024 Regular Sessions
 
                             I N  S E N A T E
 
                             January 23, 2023
                                ___________
 
 Introduced  by  Sen.  COONEY -- read twice and ordered printed, and when
   printed to be committed to the Committee on Education
 
 AN ACT to amend the education law, in relation to  annual  notifications
   to school districts to combat cyber crime
 
   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. The education law is amended by adding a new section 115 to
 read as follows:
   § 115. CYBER CRIME NOTIFICATION. 1. ANNUALLY, ON OR BEFORE JULY FIRST,
 THE DEPARTMENT SHALL NOTIFY THE DATA  PROTECTION  OFFICER,  DIRECTOR  OF
 INFORMATION  TECHNOLOGY OR OTHER HEAD OF DATA AND INFORMATION TECHNOLOGY
 SERVICES FOR EACH SCHOOL DISTRICT IN THIS STATE. SUCH NOTIFICATION SHALL
 INCLUDE:
   (A) A REMINDER OF THE STRATEGIES AND  BEST  PRACTICES  THAT  ARE  MOST
 EFFECTIVE IN COMBATTING CYBER CRIME; AND
   (B)  A  COPY  OF  THE "FRAMEWORK FOR IMPROVING CRITICAL INFRASTRUCTURE
 CYBERSECURITY VERSION 1.1" PUBLISHED BY THE NATIONAL INSTITUTE OF STAND-
 ARDS AND TECHNOLOGY ON APRIL 16, 2018.
   2. THE NOTIFICATION REQUIRED BY SUBDIVISION ONE OF THIS SECTION  SHALL
 BE DELIVERED BY EMAIL TO THE APPROPRIATE SCHOOL DISTRICT OFFICER.
   § 2. This act shall take effect immediately.
 
 
 
 
  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD03227-01-3

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.