HomeMy WebLinkAboutLL #1 of 2006- Regulation of Private Information NEW YCIRK 9TAITE DEPARTIV Ell 011 9T'3111
41 9TAITE 9TPUI III
Local Dow Filing AILBANY,NY IM31
(Use.this form is file a local lavi with the Iocrletaq of State.)
Text a law Should be given a amended. Da not include matter teing elimiaated ansl do not use itaC.9 :: n
undaulining to indicate nevi matter.
CIM"
CRI of LANSING
'Dowt
YZIM
IloaellllaWNC. oftle year 3C 00
A local Is" REQOLAMICIN OF PRIVATE INFORMMIM
Be It a naete(l by thi TOWN BOARD a f tl e
Rta+•cfuac tadve Boer)
of LAt SING as flollawS:
Town
XIMM
IOM OR LANSING, TOMPKIMS CIOUNTY, NEW YORK
UOCIAL LAW N L MBE F 'I OF 2C106
ROGMATION OR PRIVAT13 IN RORMATION
'cI9aTION 'I: TITLE AND APPLICABIUITY — Tha down of Lansing F eneby
adopts this Uacal Law, -la be knciwn as thei Town ail Lansing "Local Law N urniber 'I
of 20(16". This Local Law shall apply only wiilhin the Town al Lansing, and t eleby
110pelals any pikin focal Law an Resolution inconsisieint hElnelWilt .
'cIaaTION 2: ' RURPOSE —Me punpcise of Lcical Law Number 'I of 2006 is
io pnovlde for a sysieim iCi einsure iimuly nciiificaiian -la peinsons whase private
DOS•239 (Aeu ISM) Pagel of 3
idoniifAing infaiirniaiicin has been slalen cin subjeicled to unaulhonizead access, and
Ica qui in place sys'lems la address 'lhe pinEavonlican of such unauthorized access.
CIE CITIOf 3: 09FINITIONS - As used in this Local Law, the ikillowing
Wrms shall have the fallowing meanings:
A. "Personal infamialion" stall mean any inforrrialion
ccancEinning a natuual pEanson whict , because of name, number,
pleuscinal mark, can cithein idoniifier, can be used la idenil fl such
natural penscin;
B. "PiiivEite informa,licin" shall mean personal inikirmialian
cansisiing cif any inikirrratian in cambinaiion with any cane ai m1o1E1
of the lollcawing data elarnienis, whEin eaiilhei the pars anal inikinmalion
can 1hEi data elEimeant is nat encrypood, or encrytplted wilt an
Eincrylptian M ey that t as EMa been acquined:
11. A racial seicuniq n urniber;
2. A driver's license numbeu or nc in-c iivein
iden'Iificalicin sand numbeu; au
3. An accuun-1 numbfan, cKidil an dEibil cand
number, in cambinaiicin wilh any requineid security
code, access code, on plasswand Thal would plerrnit
Eiccess to an individual's financial gicaaunt;
"Puivatea inflormation" does nol include publicly available inlarmalian
which is lawfully made available -la It ei general public fnam fedEiral,
slate, on local goveinmeinl uecords.
CI. "Bneach of -Ihe seiauniN cal thEa system" shall mEian
unaulhanizead aaquisi-licin cin aaquisiiicin wilhoul valid auihaiizatian all
cornipluleaaiMd c ala which ccamplramises it a security, confidentiality,
ai integrity all plEanscinal inikirrratian maintained by 'it ea -lawn. -MI` ea
gcacid lai-It acquisilian of pleinscanal inikirrratian by an EamplloyeEa on
agent aril the -lawn fail Town purposes is not a breact of ihei secunity
of 1hEa system, pncivided 11ha1 the private infonrniaiicin is not usEid on
subjucl la unaulhaiizeid disclosure.
Ci. "aansumEin report ing agency" a hall meian any pEanscm which,
fou mionfitary ikies, duffs, on an a cacipeialive ncan-pncifil basis,
negulanly eangages in wt calE1 cir in part in the pinaclice cdl assembling
an eavalua-ling ccinsurnaei creidil informalicm aii When inikirrnaiian an
aansumEins fat 1he plurpcisEa cif furnishing ccansurnaeu ilepcirls la third
parties, and which USE19 any means on lacililg ail inlEinsiaie
commerce fon thEl purpcase cif plreplaning car furnishing consurnEin
reaploris, all as kept an a list compiled by ihei Sta1Ei Attorney Clenfinal.
E_ "Town" shall mean 1he -kiwn cil Lansing, in -It a Caunq cif
Tompkins and 1ItailEi ail IN ew Yaiik.
SECTION 4: 119TORMINATIONS OF DISCLOSURE - In deleinmining
wherlher inforrualian t as been acquinead, cm is iieasonaibly believed io have bEien
acquineid, by an unauthorized plenscin or a pEansan wilhouil valid authanizalicin, -Ihe
-lown rnaay considEm 'Ihe following facicans, amang cithEins:
A. Indicalicins 'It al 1hEi irnkarmaiican is in the physical possession
and control of an unauthorized parson, such as a last an stalean
ccampuleir or olhei devicfi containing inikinmialion; or
B. Inc iaatians it al thEi irnlormalion has been downloaded or
copied; ar
C. Indicaiians 1hal ilhe information was used by an unauthanized
pfinsan, such as iraudulen-1 accounils apEined an instances ail idenlitg
theft reported.
SECTION 5: NOTIFICAIIIOf� , WHEN h E CESEIIAIRY - lihe Tawn shall
disclasEi any breact oil -Ihe secuniN of the sys-lam fallowing discavarm ar
riailificEitian of the bneach in IM security o11he systerni to any nesidenll crf New
Yank slate whase pdvEite infarmailicin was, an is neasanably believEid la have
k eEin, acquired by ai plersan without valid ault a0zatlan. lit a disclost re shall bei
made in the mosl expedient tirnie possible and wiilhau'l unneasanablEi delay,
consisl(ini with the legitimate nefids oil law enfoncomenl, an any measuiies
necessarM to delEirmine the scope of the bneach and nEisiare ilhe neascinable
integrity oil it a data syslem. The -town shall cansuli wi-lh the Stale Office of
Cyber Security Ein d Clnilical Inilrasilruciune 0aardinatian to delemrniine the scope of
-It a brEiach and reslanaiicin measures. lil the lawn maintains camputeiizfid daila
-It at includes pnivate infomnalicin which the lawn does nal awn, the Tawn shall
natiN the ownEir ar licenseei Milt a infarrniation cif any bneach al the security cif 1hEi
sys-Iem immediately fallawing discaveiryl if lhfi pinivale infarmaiicin was, on is
reasonably bEilieved to have beEin, acquired by a peiscin wilt au-1 valid
atilhanizaiian. Any notificalion nequiiied by -It is Sectian may be delayed it a law
enicircemienil ageincy dfiteirmines that such na-lificalian impedes a criminal
invesligatian. The natificalicin nequited by Ihis Sectian shall be made ahem s uch
law enfanceimenl agency delEirmiines that suct nolificEitian does, nal carniprcimisE1
such inwisligatian.
SWITION fit: h OlIRICIATION RROCE DURE—
A. The no-lice icquiiied by this Local Law s hall be diiieclly pinavided to the
affected penscins by ana ail the fallowing methads:
'I. W nitten ri cil ice;
2. Eleclranic notice, pncivided that the pensan to whom nclicEi is
nequined has expressly ccinseinlec to naceiving said nailicfi in
eleclranic ikinm anc a lag oil each such nalificatian is kEipi by the
Town; giiovidEid 1urthEiri, however, that in na cases stall IM -lciwn
negt inEi a penson la cansemt to accepting said ncitice in electianic
fanrni;
3. lelephana notification, piovidEid Thal a log of each sect
notification is kept by-I he Tawn; ar
le . Subs'lilule notice, if the Tawn dEimcinstrates to thEi Sla1Ei
Aticninay General lhfit 1hEi cast ail providing ncitice would miceed
$250,00❑.a0, on That the affecled class of subject peisans to bEi
notified EixceEids 5a0,000, an such agency daes not havEi sufficient
contact infonrnialicin. Substilute notice shall consist of all cif ihEi
ikillowing:
a. Email nalice when ihEi Tawn has an email
adc ness stir IM subject penscins;
b. Ccinspicuaus posting of the ncitice cin the
Town's web site; and
C. Natificaticin la majcm slalewide media.
B. Regardless ail the mErlt ad by which nalice is plravidad, suct nailicEi shall
include aanlacl inkinm<rtian ikin 1hEi Town and a descnipiian ail the aalegaiflEis of
inlormatian Thal weifi, air ane neiasanably beilieved io haves been, acquired by a
person wilhaui iialid autharizaiicin, including a specification ail which of the
elemenis oil plersonal inikirm ation and private inikirmation wena, cin are neasanably
believad la have bfien, so acquired.
Cl. In the event chat any New Yank neesiden'ls are 11a bEi nciiifred, they 1kiwin shall
a Iso nail fl the Silate Attanne� GEinenal, ilhe Clonsumeir PKiteclion Board, and ihei
Slate OfFlcfi cif Cyber Security] and Chilical Infnaslnucluiic Cciaiic inalion as lci the
'liming, aan'leni and dis-lnidution of the nalicEis and it a appInaximrate number of
afleicled persons. Such nalicEi shall be made withcuil delaying nalicel icr affecleid
h Eiw N ank nesidenls.
11. In the evEint Thal more Than 5,000 Naw Yank iicsidents ane to I el n otifiEid al
ane lime, the Town shall also ncitify cansumer neipar ing agEincies as ilo 1hEi
'liming, contEini and disiribuiicin all the na-lices, and thEi approximate numben cif
affected peiisons. Suct naticEi shall bEi made without delaying notice icr afiEreteid
New N onk residenils.
SECI-II(1N 71: 110M TECH N OLOGN CIClMMITMO — Me flown shall
s-lrive to aan-linually upldale its iiecaid keeping systernis, digital and adheirwise, to
help secure any plrivalEi infaimalicin and Einhance thEi seicunity of Town sys-lemrs
and necands. The Tawn Superuison shall be nesponsidle io appaint one an mono
pensons and,kin -lawn Bciaid Members io examinEi and reipar annually la the
Town Board canceining the kEieping cif pnivarle infonmation, ihEi security -It eieoil,
ilhei Einhancemenl al such securrity, the identification of platenlial points cif lass and
iiisk, and the miiligatian of suah poinils ail lass oil nisk. ThEi plensons so appointed
shall compiniser the Town TEict nalogy ClarrimitlEie, and such Clornimitilee shall be
chaired by a Memiben ail the Town E oand.
SE CITION 8: EM ROF CBMIR T—
A. All pncivisions al New Yoil, law genEinally tipplicablei to nnisdeimeiancirs shall
apply -la any criminal praceeding brauclht undan -Ihis Ar iale, and-lexcerpi ilhal each
and any misdemeanor shall bEi deemed an unclassified misdemeanor. The
following civil and criminal fineis and genallieis shall aplplly to any vialalion ail the
requiremenis or lEirms cif this Lacal Law by any pleison all enlity, including Town
Ermpllciyees and officers:
'I. Hirst %icdalian: Any person an Eintity that vicilates any cif -Ile
pricivisicins of this Vocal Law shall bEr Ill guilty of an unclasa'rfied
misdEimean ail and s ubjEict to a frnei of not mane Than $,I,5a0.0a, cin 1141)
s ubjEict to a civil plenaltyj al not mare than $a,50a.a0 la be iiacavered
by IhEi 11ciwn in Gi a ivil action.
2. Second VialErlicin: Any violation that is tiund is have accuniisrd
wilt in '9I years cif any plrior civil oil criminal dEHElrrriinalicin oil any alhan
viclalian ail this Local Law shall be deemed a second vialalion. Any
person an entity that carnimiis any socand vialalion shall ber ill) guilty
of an unclassified misdemf ianor and subject to a fine of no-1 mare t han
$5,000.0% or (2) subjecl la a civil penalty of ncit mrone than $1,5aa.❑0
Io be neicciveiicd by-It a Town in a civil action.
3. Tt ind and Subsequent Violaticins: Any vicilatian It ai is ikiund to
lave accunnEid wilhin 2 years al any prior civil all cHruiri al
delarmination of any sErc(ind violation of this Local Law shall be
c eamed a Wild or subMiquant violation, as applicable. Any person on
enlity wt a cammits a ilhird on subsEiquen'l vialalian of -It is Uocal Law
stall be Ill guilty ail an unclassified misdemeanor and subject to a
fine nail moss ilhan 3110,000.00 and a pledad ail incancenatian ncrt Io
fixceed 120 days, an g22l) subjecl icr a civil plenah cif nal more than
$'15,000.(10 la be recavEired by the Town of Lansing in a civil action.
ThEi applicalicin of plunsuit of any civil an cniminal fine, sanctian, an plenaltyl shall
not piKicludEi ilhe pursuit ail any ciiher lawful remedy by the Town, including, bu-1
not limiled io, ilhe iughl -la sEiek equitable relieil.
B. Whenever 1hEi flown st all believe fnam evidence salisfacclorM is it -Ihal
1herEi is a viala-lion cif This Local Law, -It a Tawn may bring an aciian la enjoin and
iiesinain the ccinlinualian cit such vialalian. In such action, (1] pinelirniinary relies
may be granted under Alrliclei 613 ail Ihei Clivil Rnacilice Law Lind Rules, and ('9I) the
lawn shall nat be naquired its plosl any band or undEidal ing, and (3) thEi Tawn
need ncrl pnavei Thal tJi] lheim is an will likely be inimparabla hams, and/ar Ilii� that
lha Tawn has na adequate remedy at law. In such actian 'It a caurl may awand
damages fan actual crisis or IassEis incurined by the Tawn Ilregandless of whethen
any fine an pEinalq is ar rniay be imposed), including), but nat limlileid 'Io, ('I) -It e
cosl 10 pKniide nalificalicins and rela-led publications, and (21� all reasonable
atlonnays', expler s' anc cansullants' leas, and 113) any off en incideinlal and,lcm
cansequenlial IossEis ar damages. The Cclllrl may, in adc i-lion to any such
damages, alsa irnposei a civil penalty in accord with Seiclion B(A) al This Local
Law. W henEnien the Cour shall deilerminei in such action That any person on
eniit�l vialailad This Lcual Law I nowingly ar neci lessly, 'It a Caur may impase
puni'live darriages. The nEimEidies pimiided by this SEictian shall be in addition Io
any othan nemedy available la thEi Tawn.
SECTION 9: SAS 11S GPI - lil any clauses, sentencei, paragraph, sEictian or
part all this Local Law shaill be adjudged by any Caur ail camipelEinl junisdiciicin 'lo
be invalid, such judgrnien-1 shall nat affeiccl, impain cri invalida-le the remainder
I eieoi, bu-1 shall bEi canfineid in its opEmalian 'Ici ilhe clause, seinleince, paragraph,
seclian, an part theirecif, dinEictly involved in 1he conlravensy in which such
judgmen-1 s hall I ave beein rent esed.
SEC111ON 10: LIMITIAlION OR LIABILITN - The Tawn st all not bEi
liable tin resplansible icir einy injury) io persans cm -It eis rights, on any damagEi ici or
loss ail pnaplet �Jincluding lass of use, and all IassEis ar damage ici data, aaaaun-Is,
on cnEic ii) duel In -It a lawn's actions, on failuxis -lo act, under cm purstian'l la This
Local Law, unless it is pKiven -la a reasonable degree cif certainty thal such injury) on
damage was scilEdy causEid by a willful on intentional act of ihEi lkiwn. This
provision shall be canslrued and applied to thEi maximiurn exiEinl penmitled by
law.
S941IlOh '11: ERREC7N B DATB — "phis Lccal Law shall lal a eiffeal
immediately aflenfiling"
March '15, 2006