Skip to main content

Agora
Sign in

Senate bill · S8169 (2025-26)

Requires all state entities to notify affected individuals in the event of a data breach where information is compromised

Latest action Jun 1, 2026

New York State Senate

Same as A8614, the matching bill in the Assembly.

Sponsor

Siela Bynoe

State Senator, District 6 · Democratic

Follow

Summary

Requires all state entities, including local governments, to notify affected individuals in the event of a data breach where information is compromised; defines "cybersecurity incident".

Summary from NY Open Legislation. How we handle summaries

Amends the State Technology Law.

From NY Open Legislation, the NY Senate and Assembly, and official rosters. This record was last updated Oct 20, 2026. About our data

Follow

Following needs an Agora account. You will sign in first, then come back to this page.

Your position on this bill

Choose the position closest to yours. You'll sign in or create an account to save it.

Sign in or create an account to give your position

Purpose, from the sponsor's memo

Relates to the prompt notification to affected individuals in the event of a data breach within certain state entities.

Filed with the bill. Read it on nysenate.gov (opens in a new tab)

Where it stands

Passed one of the two chambers; it still needs the other.

  1. Introduced
  2. In committee
  3. Up for a vote
  4. Passed one chamber
  5. Passed
  6. Enacted

Committee

Governmental Operations · New York State Assembly

Also referred to Internet And Technology · New York State Senate.

The sponsor's argument

Why Siela Bynoe says this is needed

Between September and December of 2021, Nassau County suffered a signif- icant internal data breach that compromised the confidential records of past, current, and prospective employees, including their medical histo- ry and social security numbers. The affected individuals were not noti- fied until February of 2022. This incident revealed the larger gap in current data breach disclosure requirements which effectively exempt local municipalities from having to notify affected individuals when their personal information is compromised. This bill amends the current law to extend existing notification requirements in the event of a data break to local municipalities, who are just as susceptible to these types of vulnerabilities and who are often charged with managing highly sensitive, confidential information for thousands of individuals. This bill further amends the law to better address the full scope of threats that state entities may face, whether from individuals or otherwise, and takes steps to address instances where confidential information may still have been mishandled or compro- mised even if improper disclosure had not occurred. With proper notifi- cation, pursuant to the law, individuals will also receive information on resources for dealing with data breaches and identity theft prevention. With these adjustments, individuals will be made more fully aware of when their data may be compromised and given greater opportu- nity to take corrective action. At a time when cyberthreats are on the rise, particularly among local governments, this legislation will better protect those who rely on secure systems to keep their information safe.

This is the sponsor's own case for the bill, quoted from their memorandum. It is not Agora's description of what the bill does.

Recorded votes

  • Vote: Floor vote

    NY SenateJun 1, 2026Result: passed

    (60) (0) (0) (3)

  • Vote: Committee vote · Internet And Technology

    Senate Internet And TechnologyMay 21, 2026Result: passed

    (7) (0) (0) (0)

  • Vote: Floor vote

    NY SenateJun 10, 2025Result: passed

    (58) (0) (0) (5)

  • Vote: Committee vote · Rules

    Senate RulesJun 4, 2025Result: passed

    (20) (0) (0) (1)

  • Vote: Committee vote · Internet And Technology

    Senate Internet And TechnologyMay 27, 2025Result: passed

    (7) (0) (0) (0)

Full history

  1. Jun 1, 2026

    Sent to the executive

    DELIVERED TO ASSEMBLY

    NY Senate

  2. Jun 1, 2026

    Passed a chamber

    PASSED SENATE

    NY Senate

  3. Jun 1, 2026

    Referred to committee

    REFERRED TO GOVERNMENTAL OPERATIONS

    NY Assembly

  4. May 27, 2026

    Advanced to Third Reading

    ADVANCED TO THIRD READING

    NY Senate

  5. May 26, 2026

    2ND Report CAL.

    2ND REPORT CAL.

    NY Senate

Show full history (12 earlier events)
  1. May 21, 2026

    1ST Report CAL.1323

    1ST REPORT CAL.1323

    NY Senate

  2. Jan 7, 2026

    Died in Assembly

    DIED IN ASSEMBLY

    NY Assembly

  3. Jan 7, 2026

    Referred to committee

    REFERRED TO GOVERNMENTAL OPERATIONS

    NY Assembly

  4. Jan 7, 2026

    Referred to committee

    REFERRED TO INTERNET AND TECHNOLOGY

    NY Senate

  5. Jun 10, 2025

    Sent to the executive

    DELIVERED TO ASSEMBLY

    NY Senate

  6. Jun 10, 2025

    Passed a chamber

    PASSED SENATE

    NY Senate

  7. Jun 10, 2025

    Referred to committee

    REFERRED TO GOVERNMENTAL OPERATIONS

    NY Assembly

  8. Jun 4, 2025

    In committee

    COMMITTEE DISCHARGED AND COMMITTED TO RULES

    NY Senate

  9. Jun 4, 2025

    Ordered to Third Reading CAL.1569

    ORDERED TO THIRD READING CAL.1569

    NY Senate

  10. May 29, 2025

    Reported out of committee

    REPORTED AND COMMITTED TO FINANCE

    NY Senate

  11. May 22, 2025

    Referred to committee

    REFERRED TO GOVERNMENTAL OPERATIONS

    NY Assembly

  12. May 16, 2025

    Referred to committee

    REFERRED TO INTERNET AND TECHNOLOGY

    NY Senate