Bill Text: NY A04640 | 2023-2024 | General Assembly | Introduced

---

Bill Title: Creates a cyber security enhancement fund to be used for the purpose of upgrading cyber security in local governments, including but not limited to, villages, towns and cities with a population of one million or less; restricts the use of taxpayer moneys in paying ransoms in response to ransomware attacks.

Spectrum: Partisan Bill (Republican 9-0)

Status: (Introduced) 2024-01-03 - referred to governmental operations [A04640 Detail]

Download: New_York-2023-A04640-Introduced.html

---

                STATE OF NEW YORK
        ________________________________________________________________________

                                          4640

                               2023-2024 Regular Sessions

                   IN ASSEMBLY

                                    February 21, 2023
                                       ___________

        Introduced  by M. of A. DURSO -- read once and referred to the Committee
          on Governmental Operations

        AN ACT to amend the executive law and the state finance law, in relation
          to cyber security enhancement funding; and  to  restrict  the  use  of
          taxpayer moneys in paying ransoms

          The  People of the State of New York, represented in Senate and Assem-
        bly, do enact as follows:

     1    Section 1. The executive law is amended by adding a new section 719 to
     2  read as follows:
     3    § 719. Cyber security enhancement. 1. The commissioner of the division
     4  of homeland security and emergency services shall  establish  a  program
     5  for  the  purpose  of  upgrading  cyber  security  in local governments,
     6  including but not limited to, villages, towns and cities  with  a  popu-
     7  lation of one million or less.
     8    2.  All  costs of such program shall be paid for by the cyber security
     9  enhancement fund, established  by  section  ninety-one-h  of  the  state
    10  finance law.
    11    §  2. The state finance law is amended by adding a new section 91-h to
    12  read as follows:
    13    § 91-h. Cyber security enhancement fund. 1.  There  is  hereby  estab-
    14  lished in the joint custody of the state comptroller and the commission-
    15  er  of  taxation  and  finance  a fund to be known as the cyber security
    16  enhancement fund.
    17    2. Such fund shall consist of five million dollars transferred by  the
    18  state comptroller from the general fund, and contributions consisting of
    19  grants,  including  grants or other financial assistance from any agency
    20  of government and all moneys required by the provisions of this  section
    21  or any other law to be paid into or credited to the fund.
    22    3.  The  moneys  from  the  cyber  security  enhancement fund shall be
    23  disbursed by the division of homeland security and emergency services to
    24  be expended to upgrade the cyber security of local governments,  includ-

         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD05147-01-3
        A. 4640                             2

     1  ing  but not limited to, villages, towns and cities with a population of
     2  one million or less, pursuant to section seven hundred nineteen  of  the
     3  executive law.
     4    §  3. Notwithstanding any other provision of law, after January first,
     5  two thousand twenty-six, local and state taxpayer moneys  shall  not  be
     6  used to pay ransoms in response to ransomware attacks.
     7    § 4. This act shall take effect immediately.