Requires governmental entities to, whenever possible and feasible, consider implementing multifactor authentication for local and remote network access; requires public websites to encrypt all exchanges and to comply with privacy standards.
Requires governmental entities to, whenever possible and feasible, consider implementing multifactor authentication for local and remote network access; requires public websites to encrypt all exchanges and to comply with privacy standards.
Requires governmental entities to, whenever possible and feasible, consider implementing multifactor authentication for local and remote network access; requires public websites to encrypt all exchanges and to comply with privacy standards.
Requires social media networks to provide and maintain mechanisms for deleting individual accounts on their platform; requires social media networks to have a clear and concise policy readily available and accessible on their website and application which includes how such social media network will delete individual user accounts and all associated personal data on their platform.
Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".
Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".
Enacts the New York privacy act to require companies to disclose their methods of de-identifying personal information, to place special safeguards around data sharing and to allow consumers to obtain the names of all entities with whom their information is shared.
Directs the state comptroller to conduct an audit of the department of health and other agencies to ensure that the agency meets its responsibilities to review and assess Medicaid managed care organizations for compliance with federal and state requirements to maintain adequate health care providers within network, and to meet mental health and substance use disorder parity requirements.
Requires members of a public body to complete a minimum of two hours of training, with one hour on the state's open meetings law and one hour on freedom of information law; requires certain local, city, county, town and village public body members to complete such training as well.
Biometric Authentication Requirements for Governmental Services - Prohibition