NEW YORK STATE — Governor Kathy Hochul today signed into law S.7672A/A.6769A, a pivotal measure aimed at enhancing the cybersecurity and resilience of state and local government networks across New York. First announced in Governor Hochul’s 2025 State of the State, this legislation will improve the State’s ability to respond to threats, safeguard critical infrastructure and reduce statewide cybersecurity risks. Governor Hochul made the announcement today following a meeting with City, County, Town and Village officials from across the State to discuss current security efforts in response to the ongoing conflict in the Middle East.
“My top priority as Governor is the security and safety of all New Yorkers, and with this legislation we’re strengthening our ability to respond to and ultimately prevent cyber threats all across our state,” Governor Hochul said. “As global conflicts escalate and cyber threats evolve, so must our response, and we are taking a whole of government approach in doing so. Requiring timely incident reporting and providing annual cybersecurity training for government employees will build a stronger digital shield for every community across the State and ensure they get the support they need when it matters most.”
The legislation mandates that all municipal corporations and public authorities promptly report cybersecurity incidents and ransom payments to the New York State Division of Homeland Security and Emergency Services (DHSES), fortifying the statewide defense against digital threats. Under the new law, municipalities and public authorities are required to report cybersecurity incidents within 72 hours to DHSES and provide notice of payment of a ransom within 24 hours. The legislation also mandates annual cybersecurity awareness training for government employees across New York and sets data protection standards for State-maintained information systems.
