Bill > S03344

This bill establishes an eleven-member commission within the New York Office of Information Technology Services to study cybersecurity and data protection, specifically using the European Union's General Data Protection Regulation (GDPR) as a model. The commission will be composed of experts in cybersecurity, telecommunications, and related fields, and will investigate and make recommendations for protecting critical infrastructure across various sectors, including financial systems, telecommunications networks, electrical grids, security systems, first responder systems, physical infrastructure, and transportation systems. The commission's primary purpose is to develop innovative policies to enhance New York state's cybersecurity defenses and protect personal online information. Commission members will serve without compensation but may receive expense reimbursements, and they will have the authority to request data and resources from state agencies. Within one year of the bill's enactment, the Office of Information Technology Services must submit a report to the governor and legislature detailing their findings about the GDPR and the state's current cybersecurity landscape. The commission will work with experts in European Union cybersecurity, voter fraud, state cybersecurity, cybercrime, and hacking to evaluate their data and develop comprehensive recommendations.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/S3344