207 – Construction.
§ 207. Construction. Nothing in this article shall abridge public access to information available or permitted by any other provision or rule of law, including without limitation article six of the public officers law. Nothing in this article shall authorize the collection or disclosure of information the collection or disclosure of which is prohibited or […]
208 – Notification; Person Without Valid Authorization Has Acquired Private Information.
§ 208. Notification; person without valid authorization has acquired private information. 1. As used in this section, the following terms shall have the following meanings: (a) “Private information” shall mean either: (i) personal information consisting of any information in combination with any one or more of the following data elements, when either the data element […]
209 – Notification of a Breach of the Security of the System or a Breach of Network Security; Shared Data.
§ 209. Notification of a breach of the security of the system or a breach of network security; shared data. 1. The office shall, within twenty-four hours of either being notified of or receiving evidence of a breach of the security of the system, or a breach of network security, as defined in paragraphs (a) […]
301 – Short Title.
§ 301. Short title. This article shall be known and may be cited as the “electronic signatures and records act”.
106 – Responsibility to Respond to the Freedom of Information Law for Certain Data.
§ 106. Responsibility to respond to the freedom of information law for certain data. Where the office receives a request for another agency’s data which is in the possession of the office because it administers, operates or manages a statewide technology program, the office will transmit, within five days, in writing the request to the […]
106-A – Health Care Proxy Information.
§ 106-a. Health care proxy information. Any state agency, board, bureau, authority, commission, division, or other governmental entity performing a governmental or proprietary function for the state that maintains a public website and has a significant public interaction in the field of public health shall, in consultation with the office of information technology services and […]
106-B – Use of Biometric Identifying Technology in Schools.
§ 106-b. Use of biometric identifying technology in schools. 1. As used in this section: a. “biometric identifying technology” shall mean any tool using an automated or semi-automated process that assists in verifying a person’s identity based on a person’s biometric information. b. “biometric information” shall mean any measurable physical, physiological or behavioral characteristics that […]
107 – Severability.
§ 107. Severability. The provisions of this article shall be severable and if any portion thereof or the applicability thereof to any person or circumstances shall be held to be invalid, the remainder of this article and the application thereof shall not be affected thereby.
201 – Short Title.
§ 201. Short title. This article shall be known and may be cited as the “internet security and privacy act”.
202 – Definitions.
§ 202. Definitions. As used in this article, the following terms shall have the following meanings: 1. “Collect” shall mean to store information, including via cookie technology, for purposes of retrieval at a later time to initiate communication with or make determinations about the person who is the subject of such information. 2. “Disclose” shall […]