A 4746: Creates a cyber security enhancement fund to be used for the purpose of upgrading cyber security in local governments, including but not limited to, villages, towns and cities with a population of one million or less; restricts the use of taxpayer moneys in paying ransoms in response to ransomware attacks.

  
  STATE OF NEW YORK ________________________________________________________________________ 4746 2025-2026 Regular Sessions  IN ASSEMBLY February 6, 2025 ___________ Introduced by M. of A. DURSO -- read once and referred to the Committee on Governmental Operations AN ACT to amend the executive law and the state finance law, in relation to cyber security enhancement funding; and to restrict the use of taxpayer moneys in paying ransoms The People of the State of New York, represented in Senate and Assem- bly, do enact as follows: 1 Section 1. The executive law is amended by adding a new section 720 to 2 read as follows: 3 § 720. Cyber security enhancement. 1. The commissioner of the division 4 of homeland security and emergency services shall establish a program 5 for the purpose of upgrading cyber security in local governments, 6 including but not limited to, villages, towns and cities with a popu- 7 lation of one million or less. 8 2. All costs of such program shall be paid for by the cyber security 9 enhancement fund, established by section ninety-one-h of the state 10 finance law. 11 § 2. The state finance law is amended by adding a new section 91-h to 12 read as follows: 13 § 91-h. Cyber security enhancement fund. 1. There is hereby estab- 14 lished in the joint custody of the state comptroller and the commission- 15 er of taxation and finance a fund to be known as the cyber security 16 enhancement fund. 17 2. Such fund shall consist of five million dollars transferred by the 18 state comptroller from the general fund, and contributions consisting of 19 grants, including grants or other financial assistance from any agency 20 of government and all moneys required by the provisions of this section 21 or any other law to be paid into or credited to the fund. 22 3. The moneys from the cyber security enhancement fund shall be 23 disbursed by the division of homeland security and emergency services to 24 be expended to upgrade the cyber security of local governments, includ- EXPLANATION--Matter in italics (underscored) is new; matter in brackets [ ] is old law to be omitted. LBD00527-01-5 
 A. 4746 2 1 ing but not limited to, villages, towns and cities with a population of 2 one million or less, pursuant to section seven hundred twenty of the 3 executive law. 4 § 3. Notwithstanding any other provision of law, after January first, 5 two thousand twenty-eight, local and state taxpayer moneys shall not be 6 used to pay ransoms in response to ransomware attacks. 7 § 4. This act shall take effect immediately.