207 – Construction.
§ 207. Construction. Nothing in this article shall abridge public access to information available or permitted by any other provision or rule of law, including without limitation article six of the public officers law. Nothing in this article shall authorize the collection or disclosure of information the collection or disclosure of which is prohibited or […]
208 – Notification; Person Without Valid Authorization Has Acquired Private Information.
§ 208. Notification; person without valid authorization has acquired private information. 1. As used in this section, the following terms shall have the following meanings: (a) “Private information” shall mean either: (i) personal information consisting of any information in combination with any one or more of the following data elements, when either the data element […]
209 – Notification of a Breach of the Security of the System or a Breach of Network Security; Shared Data.
§ 209. Notification of a breach of the security of the system or a breach of network security; shared data. 1. The office shall, within twenty-four hours of either being notified of or receiving evidence of a breach of the security of the system, or a breach of network security, as defined in paragraphs (a) […]
301 – Short Title.
§ 301. Short title. This article shall be known and may be cited as the “electronic signatures and records act”.
106-A – Health Care Proxy Information.
§ 106-a. Health care proxy information. Any state agency, board, bureau, authority, commission, division, or other governmental entity performing a governmental or proprietary function for the state that maintains a public website and has a significant public interaction in the field of public health shall, in consultation with the office of information technology services and […]
106-B – Use of Biometric Identifying Technology in Schools.
§ 106-b. Use of biometric identifying technology in schools. 1. As used in this section: a. “biometric identifying technology” shall mean any tool using an automated or semi-automated process that assists in verifying a person’s identity based on a person’s biometric information. b. “biometric information” shall mean any measurable physical, physiological or behavioral characteristics that […]
107 – Severability.
§ 107. Severability. The provisions of this article shall be severable and if any portion thereof or the applicability thereof to any person or circumstances shall be held to be invalid, the remainder of this article and the application thereof shall not be affected thereby.
201 – Short Title.
§ 201. Short title. This article shall be known and may be cited as the “internet security and privacy act”.
202 – Definitions.
§ 202. Definitions. As used in this article, the following terms shall have the following meanings: 1. “Collect” shall mean to store information, including via cookie technology, for purposes of retrieval at a later time to initiate communication with or make determinations about the person who is the subject of such information. 2. “Disclose” shall […]
203 – Model Internet Privacy Policy.
§ 203. Model internet privacy policy. 1. The office shall adopt rules and regulations in conformity with the provisions of this article, and specify a model internet privacy policy for state agencies that maintain state agency websites. Such model privacy policy shall include, but not be limited to, the following elements: (a) a statement of […]