207 – Construction.
§ 207. Construction. Nothing in this article shall abridge public access to information available or permitted by any other provision or rule of law, including without limitation article six of the public officers law. Nothing in this article shall authorize the collection or disclosure of information the collection or disclosure of which is prohibited or […]
208 – Notification; Person Without Valid Authorization Has Acquired Private Information.
§ 208. Notification; person without valid authorization has acquired private information. 1. As used in this section, the following terms shall have the following meanings: (a) “Private information” shall mean either: (i) personal information consisting of any information in combination with any one or more of the following data elements, when either the data element […]
209 – Notification of a Breach of the Security of the System or a Breach of Network Security; Shared Data.
§ 209. Notification of a breach of the security of the system or a breach of network security; shared data. 1. The office shall, within twenty-four hours of either being notified of or receiving evidence of a breach of the security of the system, or a breach of network security, as defined in paragraphs (a) […]
301 – Short Title.
§ 301. Short title. This article shall be known and may be cited as the “electronic signatures and records act”.
107 – Severability.
§ 107. Severability. The provisions of this article shall be severable and if any portion thereof or the applicability thereof to any person or circumstances shall be held to be invalid, the remainder of this article and the application thereof shall not be affected thereby.
201 – Short Title.
§ 201. Short title. This article shall be known and may be cited as the “internet security and privacy act”.
202 – Definitions.
§ 202. Definitions. As used in this article, the following terms shall have the following meanings: 1. “Collect” shall mean to store information, including via cookie technology, for purposes of retrieval at a later time to initiate communication with or make determinations about the person who is the subject of such information. 2. “Disclose” shall […]
203 – Model Internet Privacy Policy.
§ 203. Model internet privacy policy. 1. The office shall adopt rules and regulations in conformity with the provisions of this article, and specify a model internet privacy policy for state agencies that maintain state agency websites. Such model privacy policy shall include, but not be limited to, the following elements: (a) a statement of […]
103-B – Gender-Neutral Terminology; State Agencies.
§ 103-b. Gender-neutral terminology; state agencies. Each state agency shall use gender-neutral terminology on their websites; provided, however, if such language is in reference to a specific person, or a specific group of people, the language referring to such person or group may be gendered in accordance with the gender identity of such person or […]
104 – Advisory Council for Technology.
§ 104. Advisory council for technology. 1. There shall be within the office, an advisory council for technology. The director of the office shall serve as chair of the council. The council shall be composed of a minimum of nine information resource management directors or their equivalent appointed by the governor. The governor’s appointments shall […]