Technology

Directs that state agencies require that procurement of end point devices be consistent with any relevant standards, guidelines, or guidance developed as part of the National Institute of Standards and Technology (NIST) Cybersecurity Framework.

This bill expands the legal definition of "personal identifying information" to explicitly include medical information and health insurance details. It directly affects individuals whose medical history, treatment records, or health insurance policy numbers could be misused, as these now count as sensitive data under identity theft laws. Key provisions add specific definitions: "medical information" covers health history and treatment, while "health insurance information" includes policy numbers and claims history. The bill modifies existing penal, business, and technology laws to incorporate these changes, removing prior related provisions through repeal. This update strengthens protections by making unauthorized use of health data prosecutable under current identity theft statutes.

S 778 regulates online dating services in New York by setting consumer protections and pricing limits. It caps two-year membership costs at $1,000 (with exceptions for one-year contracts), bans requiring ancillary services (like photo sessions) as a condition of use, and mandates a minimum number of matches per month for paid accounts over $25. If services fail to deliver the promised matches for two consecutive months, users can cancel and receive a refund (minus a small fee for services provided). The bill also grants a three-day cooling-off period for cancellations without penalty and requires dating platforms to return or destroy user data upon contract end.