BILL NUMBER: S7269
SPONSOR: GRIFFO
 
TITLE OF BILL:
An act to amend the general business law, in relation to the security of
connected devices
 
PURPOSE:
The bill would require a manufacturer of a connected device to equip it
with reasonable security features that are appropriate to ensure the
protection of the information that is contained within it to prevent its
unauthorized access, destruction. use. modification or disclosure.
 
SUMMARY OF PROVISIONS:
Section 1 amends the general business law by adding a new section 390-f,
defining the following terms: authentication; connected device; manufac-
turer; security feature; unauthorized access, destruction, use, modifi-
cation, or disclosure.
Additionally, the section details that the manufacturer of a connected
device is responsible for equipping said device with a reasonable secu-
rity feature or features.
Section 2 marks the effective date.
 
JUSTIFICATION:
The 21st century (and the Internet) has given rise to a host of devices
which provide convenience to all people who use them for any purpose,
such as obtaining information, making purchases, streaming media
content, communicating with one another, amongst a plethora of other
uses. However, the connectivity that our society now experiences has
also given rise to different forms of criminal activity and privacy
invasion that can be extremely detrimental to a significant number of
people with a minimum amount of effort. This bill aims to add a layer of
protection for the users of connected devices by compelling the manufac-
turers to equip these devices with reasonable security measures to
prevent the sensitive information they contain from being compromised by
those wishing to harm others.
 
LEGISLATIVE HISTORY:
2023-24-S.1926 - Internet and Technology Committee/A.322-Consumer
Affairs and Protection Committee.
2021-22- S. 3830-Internet Technology Committee/A. 322-Consumer Affairs
and Protection Committee.
2019-20 - S. 3973 - Internet Technology Committee.
2018 - S. 9179 - Rules Committee.
 
FISCAL IMPLICATIONS:
To be determined.
 
EFFECTIVE DATE:
This act shall take effect on the first of January next succeeding the
date on which it shall have become a law.