NY A02896

Removes customer electrical and gas consumption data from the definition of "critical energy infrastructure" and redefines "industrial control systems" to focus on information systems that monitor and control industrial processes including SCADA systems, distributed control systems, and programmable logic controllers.

Removes requirement that the Division of Homeland Security assess vulnerability of industrial control systems as defined in the energy law when conducting critical infrastructure assessments.

Requires the Public Service Commission to evaluate customer privacy protections for electrical and gas consumption data during management and operations audits of gas and electric corporations performed at least once every five years.

Requires the Public Service Commission to establish rules directing electric and gas corporations to monitor operational control networks and protect customer privacy including customer consumption data from unauthorized disclosure.

Establishes customer electric and gas consumption data as confidential and authorizes the Public Service Commission to promulgate rules requiring utilities to protect such data from unauthorized or unconsented disclosure.