Loading chat...
NY A08614
Bill
Status
5/22/2025
Primary Sponsor
Brian Cunningham
Click for details
AI Summary
-
Expands the definition of "breach of the security of the system" to include "unauthorized utilization" of computerized data, in addition to unauthorized acquisition
-
Extends data breach notification requirements to all cities, counties, municipalities, villages, towns, and other local agencies, which were previously excluded from the definition of "state entity"
-
Adds a new definition for "cybersecurity incident" covering events that jeopardize the integrity, confidentiality, or availability of computers, information systems, networks, or virtual infrastructure
-
Requires the Office of Information Technology Services to deliver a report within 90 days of a breach notice, including recommendations to restore and improve system security
-
Takes effect 90 days after becoming law
Legislative Description
Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".
Last Action
referred to governmental operations
1/7/2026