This bill expands New York's Opportunity Promise Scholarship to cover all SUNY and CUNY community college programs awarding associate's degrees in high-demand fields. It directly affects students enrolled in these programs, including those in fields like nursing, cybersecurity, engineering, and green energy. The key mechanism adds all approved SUNY/CUNY associate degree programs in designated high-demand fields (updated annually by the Department of Labor) to the scholarship's eligibility. The change applies immediately for the 2025-2026 academic year and beyond, broadening access to the scholarship.
Directs that state agencies require that procurement of end point devices be consistent with any relevant standards, guidelines, or guidance developed as part of the National Institute of Standards and Technology (NIST) Cybersecurity Framework.
Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".
Requires all municipal corporations to report cybersecurity incidents and demands of ransom payments to the division of homeland security and emergency services; defines terms; requires cybersecurity incident reviews; requires cybersecurity awareness training, cybersecurity protection and data protection standards for state maintained information systems.
Requires state employees who use a computer to complete at least twenty-five percent of such employees' required duties to undergo annual cyber security training.
Creates a cyber security enhancement fund to be used for the purpose of upgrading cyber security in local governments, including but not limited to, villages, towns and cities with a population of one million or less; restricts the use of taxpayer moneys in paying ransoms in response to ransomware attacks.
S 3344 creates a 11-member commission within New York's Office of Information Technology Services to study the European Union's GDPR and assess the state's current cybersecurity posture. The commission will examine protections for critical infrastructure - including electrical grids, transportation systems, and financial networks - and develop recommendations to strengthen online data privacy for New York residents. It must submit a report to the governor and legislature within one year, using EU standards as a model. This bill directly affects state government agencies and private sector entities operating critical infrastructure, but does not enact new laws - it focuses solely on research and recommendations.
Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".
Requires policies covering losses or damages from cyberattacks to include a requirement that the insured notify a law enforcement agency before receiving payment for losses or damages suffered as a result of the cyberattack.
Establishes the "secure our data act"; relates to cybersecurity protection by state entities; requires the office of information technology services to develop standards for data protection of state entity-maintained information.
