Bill Text: NY A02529 | 2023-2024 | General Assembly | Introduced

---

Bill Title: Establishes a commission to study the European Union's general protection data regulation and the current state of cyber security in the state.

Spectrum: Partisan Bill (Democrat 1-0)

Status: (Introduced - Dead) 2024-01-03 - referred to governmental operations [A02529 Detail]

Download: New_York-2023-A02529-Introduced.html

---

                STATE OF NEW YORK
        ________________________________________________________________________

                                          2529

                               2023-2024 Regular Sessions

                   IN ASSEMBLY

                                    January 26, 2023
                                       ___________

        Introduced  by M. of A. VANEL -- read once and referred to the Committee
          on Governmental Operations

        AN ACT establishing a commission to study the European  Union's  general
          protection  data regulation and the current state of cyber security in
          the state

          The People of the State of New York, represented in Senate and  Assem-
        bly, do enact as follows:

     1    Section  1.  a.  The  office  of  information  technology services, in
     2  consultation with, and using data  collected  by,  the  state  board  of
     3  elections,  shall  establish  a commission to study the European Union's
     4  general protection data regulation and the current state of cyber  secu-
     5  rity  in  the  state,  to develop legislation to protect people's online
     6  personal information.
     7    b. Such commission shall consist of eleven members to be appointed  by
     8  the  director  of  the  office  of information technology services. Such
     9  members shall have knowledge of and expertise in cyber  security,  tele-
    10  communications,  internet  service delivery, public protection, computer
    11  systems and/or computer networks.
    12    c. Such commission shall investigate, discuss and make recommendations
    13  concerning cyber security issues  using  the  European  Union's  general
    14  protection  data  regulation  as  a  model involving both the public and
    15  private sectors and the necessary steps New York state  should  take  to
    16  protect:
    17    i. critical cyber infrastructure;
    18    ii. financial systems;
    19    iii. telecommunications networks;
    20    iv. electrical grids;
    21    v. security systems;
    22    vi. first responder systems and infrastructure;
    23    vii. physical infrastructure systems;
    24    viii. transportation systems; and

         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD06219-01-3
        A. 2529                             2

     1    ix.  any additional sectors of state government and the private sector
     2  as the commission deems necessary.
     3    d.  The purpose of such commission shall be to promote the development
     4  of innovative, actionable policies to ensure that New York state  is  in
     5  the forefront of personal cyber security defense.
     6    e.  The  members  of such commission shall receive no compensation for
     7  their services, but may receive actual and necessary expenses, and shall
     8  not be disqualified for holding any other public office or employment by
     9  means of their service as a member of the commission.
    10    f. Such commission shall be entitled to request and receive, and shall
    11  be provided with, such facilities, resources and  data  of  any  agency,
    12  department,  division, board, bureau, commission, or public authority of
    13  the state, as they may reasonably request, to properly carry  out  their
    14  powers, duties and purpose.
    15    §  2. No later than one year after the effective date of this act, the
    16  office of information technology services shall submit to  the  governor
    17  and  the  legislature  a  report  regarding the European Union's general
    18  protection data regulation and the current state of  cyber  security  in
    19  the state.
    20    § 3. The office of information technology services shall evaluate such
    21  data with the assistance of experts in:
    22    a. European Union cyber security;
    23    b. voter fraud;
    24    c. New York state cyber security;
    25    d. cybercrime; and
    26    e. hacking.
    27    § 4. This act shall take effect immediately.