NY S06068

Office of Information Technology Services shall establish an 11-member commission to study the European Union's General Data Protection Regulation and New York's current cyber security state, with members appointed by the director and possessing expertise in cyber security, telecommunications, internet service delivery, and computer systems.

Commission shall investigate cyber security issues affecting critical infrastructure including cyber systems, financial systems, telecommunications networks, electrical grids, security systems, first responder infrastructure, physical infrastructure, and transportation systems, using the EU's General Data Protection Regulation as a model.

Commission members shall receive no compensation but may receive actual and necessary expenses, and shall have access to facilities, resources, and data from any state agency, department, or public authority as reasonably requested.

Office of Information Technology Services shall submit a report to the governor and legislature no later than one year after the act's effective date regarding the EU's General Data Protection Regulation and New York's cyber security status, evaluated with assistance from experts in EU cyber security, voter fraud, state cyber security, cybercrime, and hacking.

Act takes effect immediately upon enactment.