NY A11681

Establishes the Computer Security Act to regulate malicious software installation and use on computers in New York State, making it illegal for unauthorized persons to deceptively install software that modifies browser settings, collects personally identifiable information, or disables security software.

Creates criminal penalties of imprisonment for 1-10 years or fines up to $3 million for violations involving keystroke logging, computer viruses, denial of service attacks, or modem hijacking.

Authorizes civil actions by the Attorney General for up to $100,000 per pattern or practice violation, allows telecommunications carriers to recover costs from violators who misuse modems, and permits internet service providers and software companies to recover up to $1 million for pattern violations.

Provides immunity from liability for employers regarding employee computers and for persons whose computers are used by unauthorized third parties without knowledge or consent.

Preempts all local laws, regulations, and ordinances regarding spyware and computer software information collection practices, establishing this as a statewide concern with an effective date of November 1st following enactment.