Cybersecurity legislation in New York

Every bill in the New York Legislature that falls inside the Cybersecurity Legislation Tracker's scope, with where each one currently stands.

Bills in Scope

Past Committee

4 June 2026

Most Recent Action

Cybersecurity bills in New York

2Enacted

4Past committee

8Introduced or inactive

14 bills in scope

Enacted

S 7672Relates to municipal cybersecurity incidents or ransomware attacks26 June 2025Enacted A 426Relates to procurement requirements for end point device security14 February 2025Enacted

Past committee

S 10635Relates to the use of smart access systems and the information that may be gathered from such systems4 June 2026Passed chamber S 8169Requires all state entities to notify affected individuals in the event of a data breach where information is compromised1 June 2026Passed chamber J 1865Memorializing Governor Kathy Hochul to proclaim October 2026, as Cyber Security Awareness Month in the State of New York21 April 2026Passed chamber S 1961Establishes the "secure our data act"25 February 2026Passed chamber

Introduced or inactive

A 6301Enacts the Critical Infrastructure Standards and Procedures Act10 February 2026In committee A 1157Imposes a five-day time limit during which to disclose a breach in the security of a system7 January 2026In committee A 1239Requires policies covering losses or damages from cyberattacks to include a requirement that the insured notify a law enforcement agency7 January 2026In committee A 4746Relates to creating a cyber security enhancement fund and restricting the use of taxpayer moneys in paying ransoms7 January 2026In committee A 4987Enacts the New York veteran digital navigator program act7 January 2026In committee A 7719Establishes a commission to study cyber security in the state7 January 2026In committee S 3258Requires the department of education to provide annual notifications to school districts to combat cyber crime7 January 2026In committee S 5479Relates to unauthorized use of a mobile telephone or any data contained therein7 January 2026In committee

Bill titles link to the New York Legislature's own page.

Coverage depth varies by jurisdiction. How this is measured, and where it is thinner.

What's In Scope

How Cybersecurity Legislation bills are selected

In scope is any bill imposing security duties on an identifiable party: incident notification to a regulator or an affected person, written information security programs and reasonable security standards, ransomware payment restrictions and disclosure, vendor and supply chain requirements, and the treatment of industrial control systems and supervisory control and data acquisition systems.

Scope is defined by a written topic profile that every bill is measured against. The profiles are drafted by a model and validated by retrieval measurement against a judged set of bills, not reviewed by an attorney. LawSignals is a research tool and does not provide legal advice.

Other practice areas in New York

Cybersecurity legislation in other jurisdictions

36 more currently hold bills in this tracker

New York is one of Cybersecurity Legislation's jurisdictions

The tracker follows this subject everywhere it is legislated, and publishes a monthly issue on what moved across all of them.

About the Cybersecurity Legislation Tracker See pricing