Bill Text: NY S07361 | 2011-2012 | General Assembly | Introduced
Bill Title: Relates to oversight of New York state intelligence data centers.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Introduced - Dead) 2012-05-02 - REFERRED TO FINANCE [S07361 Detail]
Download: New_York-2011-S07361-Introduced.html
S T A T E O F N E W Y O R K
________________________________________________________________________
7361
I N S E N A T E
May 2, 2012
___________
Introduced by Sen. PARKER -- read twice and ordered printed, and when
printed to be committed to the Committee on Finance
AN ACT to amend the executive law, in relation to oversight of intelli-
gence data centers
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
1 Section 1. The executive law is amended by adding a new article 11-A
2 to read as follows:
3 ARTICLE 11-A
4 OFFICE OF DATA PROTECTION AND PRIVACY OVERSIGHT FOR NEW YORK STATE
5 FUSION CENTERS AND OTHER INTELLIGENCE DATA CENTERS
6 SECTION 232. DEFINITIONS.
7 233. ESTABLISHMENT.
8 S 232. DEFINITIONS. AS USED IN THIS ARTICLE, THE FOLLOWING WORDS SHALL
9 HAVE THE FOLLOWING MEANINGS:
10 1. "OFFICE" SHALL MEAN THE OFFICE OF DATA PROTECTION AND PRIVACY OVER-
11 SIGHT FOR NEW YORK STATE INTELLIGENCE DATA CENTERS.
12 2. "INTELLIGENCE DATA CENTER" SHALL MEAN ANY ENTITY WHOSE MISSION
13 INCLUDES COLLECTING, ANALYZING, AND SHARING INTELLIGENCE DATA AND OTHER
14 DATA FOR LAW ENFORCEMENT OR HOMELAND SECURITY PURPOSES.
15 3. "PERSONALLY IDENTIFIABLE INFORMATION" SHALL MEAN ALL PERSONAL DATA
16 AND ANY DATA ELEMENT OR COMBINATION OF DATA ELEMENTS THAT IDENTIFIES OR
17 COULD BE USED TO IDENTIFY ANY INDIVIDUAL, INCLUDING, BUT NOT LIMITED TO,
18 BY ANY OF THE FOLLOWING:
19 (A) NAME OF PERSON;
20 (B) DATE OF BIRTH;
21 (C) ADDRESS OF RESIDENCE;
22 (D) ELECTRONIC PASSWORD;
23 (E) UNIQUE ACCOUNT NUMBER;
24 (F) PHONE NUMBER;
25 (G) BIOMETRIC IDENTIFIERS INCLUDING SIGNATURE, DNA, FINGERPRINTS, IRIS
26 OR RETINAL SCANS, PALM TELEMETRY, PHOTOGRAPH, FACIAL RECOGNITION MEAS-
27 UREMENTS OR ANY OTHER BIOMETRIC MEASUREMENT;
28 (H) E-MAIL ADDRESS;
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD15603-01-2
S. 7361 2
1 (I) INTERNET PROTOCOL ADDRESS;
2 (J) WEB ADDRESS; OR
3 (K) ANY OTHER UNIQUE IDENTIFIER.
4 S 233. ESTABLISHMENT. 1. THERE IS HEREBY ESTABLISHED THE OFFICE OF
5 DATA PROTECTION AND PRIVACY OVERSIGHT FOR INTELLIGENCE DATA CENTERS
6 OPERATING IN NEW YORK STATE.
7 2. THE OFFICE SHALL BE UNDER THE DIRECTION OF A COMMISSIONER, WHO
8 SHALL DEVOTE FULL TIME TO HIS OR HER DUTIES.
9 3. THE COMMISSIONER SHALL BE APPOINTED BY THE GOVERNOR, AND CONFIRMED
10 BY THE SENATE, AND SHALL SERVE FOR A TERM OF THREE YEARS.
11 4. (A) THE PERSON SO APPOINTED SHALL BE SELECTED WITHOUT REGARD TO
12 PARTY AFFILIATION AND SOLELY ON THE BASIS OF INTEGRITY AND DEMONSTRATED
13 ABILITY IN DATA MANAGEMENT, PRIVACY PROTECTION, PUBLIC ADMINISTRATION,
14 LAW, MANAGEMENT ANALYSIS, OR THE ADMINISTRATION OF JUSTICE.
15 (B) IN CASE OF A VACANCY IN THE POSITION OF THE COMMISSIONER, HIS OR
16 HER SUCCESSOR SHALL BE APPOINTED IN THE SAME MANNER FOR THE UNEXPIRED
17 TERM. NO PERSON SHALL BE APPOINTED FOR MORE THAN TWO THREE-YEAR TERMS.
18 (C) THE PERSON SO APPOINTED MAY BE REMOVED FROM OFFICE, FOR CAUSE, BY
19 THE GOVERNOR. SUCH CAUSE MAY INCLUDE SUBSTANTIAL NEGLECT OF DUTY, GROSS
20 MISCONDUCT OR CONVICTION OF A CRIME. THE REASONS FOR REMOVAL OF THE
21 COMMISSIONER SHALL BE STATED IN WRITING AND SHALL INCLUDE THE BASIS FOR
22 SUCH REMOVAL. SUCH WRITING SHALL BE SENT TO THE LEGISLATURE, THE GOVER-
23 NOR, AND THE SECRETARY OF STATE AT THE TIME OF THE REMOVAL AND SHALL BE
24 DEEMED TO BE A PUBLIC DOCUMENT.
25 5. (A) THE COMMISSIONER MAY, SUBJECT TO APPROPRIATION, APPOINT SUCH
26 OTHER PERSONNEL AS MAY BE DEEMED NECESSARY TO PERFORM THE DUTIES OF THE
27 OFFICE.
28 (B) THE COMMISSIONER SHALL BE AUTHORIZED TO APPLY FOR, AND ACCEPT ON
29 BEHALF OF THE STATE, FEDERAL, LOCAL OR PRIVATE GRANTS, BEQUESTS, GIFTS
30 OR CONTRIBUTIONS FOR THE PURPOSE OF CARRYING OUT THE FUNCTIONS OF THE
31 OFFICE.
32 (C) THE COMMISSIONER SHALL DEVELOP PROCEDURES FOR THE OFFICE APPROPRI-
33 ATE TO THE EFFECTIVE PERFORMANCE OF ITS DUTIES.
34 6. THE COMMISSIONER OR HIS OR HER DESIGNEES SHALL HAVE ACCESS AT ANY
35 AND ALL REASONABLE TIMES TO ANY FACILITY, PROGRAM, OR PORTION THEREOF
36 THAT IS OPERATED BY INTELLIGENCE DATA CENTERS IN THE STATE, AND TO ALL
37 RECORDS, REPORTS, MATERIALS, AND EMPLOYEES IN ORDER TO CARRY OUT THE
38 RESPONSIBILITIES OF THE OFFICE.
39 7. THE COMMISSIONER MAY REQUEST THE ATTENDANCE AND TESTIMONY OF
40 WITNESSES AND THE PRODUCTION OF DOCUMENTS, PAPERS, BOOKS, RECORDS,
41 REPORTS, REVIEWS, RECOMMENDATIONS, CORRESPONDENCE, DATA AND OTHER INFOR-
42 MATION THAT THE COMMISSIONER REASONABLY BELIEVES IS RELEVANT TO THE
43 OVERSIGHT AND REPORTING RESPONSIBILITIES OF THE OFFICE. IF A REQUEST IS
44 DENIED, THE COMMISSIONER SHALL HAVE THE POWER TO ISSUE A SUBPOENA FOR
45 WITNESSES AND THE PRODUCTION OF DOCUMENTS AND ANY OTHER DATA, IN WHATEV-
46 ER FORM, INCLUDING ELECTRONIC, THAT THE COMMISSIONER REASONABLY BELIEVES
47 IS RELEVANT. IF ANY PERSON TO WHOM A SUBPOENA IS ISSUED FAILS TO APPEAR,
48 OR HAVING APPEARED, REFUSES TO GIVE TESTIMONY OR FAILS TO PRODUCE
49 EVIDENCE REQUIRED, THE COMMISSIONER MAY APPLY TO THE SUPERIOR COURT TO
50 ISSUE AN ORDER TO COMPEL THE TESTIMONY AND PRODUCTION OF DOCUMENTS OF
51 ANY SUCH WITNESSES. A FAILURE TO OBEY THE ORDER MAY BE PUNISHED AS
52 CONTEMPT. ANY PERSON OR OFFICE OR CUSTODIAN OF RECORDS TO WHOM SUCH A
53 REQUEST OR SUBPOENA IS DIRECTED MAY SEEK INJUNCTIVE RELIEF IN THE SUPE-
54 RIOR COURT TO DEFER A SUBPOENA ISSUED BY THE COMMISSIONER.
55 8. THE OFFICE SHALL:
S. 7361 3
1 (A) EXAMINE, ON A SYSTEM-WIDE BASIS, THE ENTIRE SCOPE OF THE INTELLI-
2 GENCE AND OTHER OPERATIONS OF INTELLIGENCE DATA CENTERS IN NEW YORK
3 STATE.
4 (B) INVESTIGATE, EVALUATE, AND ANALYZE THE PARTICULAR PROCEDURES, BOTH
5 AS WRITTEN AND IN PRACTICE, EMPLOYED BY INTELLIGENCE DATA CENTERS IN
6 COLLECTING DATA, INCLUDING PERSONALLY IDENTIFIABLE INFORMATION, AND IN
7 PROTECTING THE PRIVACY AND SECURITY OF SUCH INFORMATION;
8 (C) INVESTIGATE, EVALUATE, AND ANALYZE THE PARTICULAR PROCEDURES, BOTH
9 WRITTEN AND IN PRACTICE, EMPLOYED BY INTELLIGENCE DATA CENTERS TO ENSURE
10 THAT THE ACTIVITIES OF SUCH CENTERS DO NOT INFRINGE ON THE RIGHTS TO
11 FREEDOM OF ASSEMBLY, ASSOCIATION, AND EXPRESSION GUARANTEED BY THE
12 UNITED STATES CONSTITUTION AND THE NEW YORK STATE CONSTITUTION;
13 (D) INVESTIGATE, EVALUATE, AND ANALYZE THE IMPACT OF ANY MILITARY
14 INVOLVEMENT IN INTELLIGENCE DATA CENTER ACTIVITIES;
15 (E) INVESTIGATE, EVALUATE, AND ANALYZE THE IMPACT OF ANY PRIVATE
16 SECTOR INVOLVEMENT IN INTELLIGENCE DATA CENTER ACTIVITIES ON THE PRIVACY
17 AND SECURITY OF PERSONALLY IDENTIFIABLE INFORMATION;
18 (F) INVESTIGATE, EVALUATE, AND ANALYZE THE QUALITY, TIMELINESS,
19 COMPLETENESS, ACCURACY AND EFFICIENCY OF INTELLIGENCE DATA CENTERS'
20 RESPONSES TO INDIVIDUALS' REQUESTS;
21 (G) ISSUE SEMI-ANNUAL WRITTEN REPORTS, WHICH SHALL BE PUBLIC RECORDS,
22 AND SHALL BE FILED WITH THE LEGISLATURE, AND SUBMITTED TO THE GOVERNOR,
23 THE CHAIRS OF THE ASSEMBLY WAYS AND MEANS AND SENATE FINANCE COMMITTEES,
24 THE CHAIRS OF THE SENATE AND ASSEMBLY JUDICIARY COMMITTEES, THE SENATE
25 VETERANS, HOMELAND SECURITY AND MILITARY AFFAIRS COMMITTEE, THE SENATE
26 CONSUMER PROTECTION COMMITTEE AND THE ASSEMBLY CONSUMER AFFAIRS AND
27 PROTECTION COMMITTEE AND THE ASSEMBLY ECONOMIC DEVELOPMENT, JOB
28 CREATION, COMMERCE AND INDUSTRY COMMITTEE. THE FIRST REPORT SHALL BE
29 FILED ON OR BEFORE JANUARY THIRTIETH, TWO THOUSAND FOURTEEN;
30 (H) ASSIST AND COOPERATE WITH THE MEMBERS OF THE SEVERAL RELEVANT
31 COMMITTEES, AS NOTED, IN CONVENING AND PARTICIPATING IN ANNUAL PUBLIC
32 HEARINGS CONCERNING THE OPERATIONS OF INTELLIGENCE DATA CENTERS IN THE
33 STATE;
34 (I) PROVIDE INDEPENDENT OVERSIGHT OF DATA AND PRIVACY PROTECTION FUNC-
35 TIONS AT INTELLIGENCE DATA CENTERS, WITH REGARD TO THE COLLECTION, MAIN-
36 TENANCE AND STORAGE, AND ANY DISCLOSURE, TRANSFER, OR DISSEMINATION OF
37 PERSONALLY IDENTIFIABLE INFORMATION OR INTELLIGENCE DATA;
38 (J) ADVISE THE PUBLIC AND PUBLIC OFFICIALS IN ALL BRANCHES AND AT ALL
39 LEVELS OF STATE GOVERNMENT ABOUT THE DATA AND PRIVACY PROTECTION OPER-
40 ATIONS OF THE INTELLIGENCE DATA CENTERS; AND
41 (K) MAKE ANNUAL FINDINGS AND RECOMMENDATIONS CONCERNING THE OPERATIONS
42 OF INTELLIGENCE DATA CENTERS AND SUBMIT APPROPRIATE LEGISLATION TO
43 ADDRESS IDENTIFIED ISSUES.
44 S 2. The executive law is amended by adding a new section 225-b to
45 read as follows:
46 S 225-B. PROHIBITION ON COLLECTING CERTAIN INFORMATION. 1. NO STATE
47 OR LOCAL LAW ENFORCEMENT AGENCY, PROSECUTORIAL OFFICE, OR POLICE OR
48 PEACE OFFICER SHALL COLLECT OR MAINTAIN INFORMATION ABOUT THE POLITICAL,
49 RELIGIOUS OR SOCIAL VIEWS, ASSOCIATIONS OR ACTIVITIES OF ANY INDIVIDUAL,
50 GROUP, ASSOCIATION, ORGANIZATION, CORPORATION, BUSINESS OR PARTNERSHIP
51 OR OTHER ENTITY UNLESS SUCH INFORMATION DIRECTLY RELATES TO AN INVESTI-
52 GATION OF CRIMINAL ACTIVITIES, AND THERE ARE REASONABLE GROUNDS TO
53 SUSPECT THE SUBJECT OF THE INFORMATION IS INVOLVED IN CRIMINAL CONDUCT.
54 2. ANY INFORMATION COLLECTED OR MAINTAINED UNDER SUBDIVISION ONE OF
55 THIS SECTION SHALL BE REFERRED TO HEREINAFTER AS "PROTECTED INFORMA-
56 TION". NO INTELLIGENCE DATA CENTER, AS DEFINED IN SECTION TWO HUNDRED
S. 7361 4
1 THIRTY-TWO OF THIS CHAPTER, OR STATE OR LOCAL LAW ENFORCEMENT AGENCY IN
2 RECEIPT OF INFORMATION FROM AN INTELLIGENCE DATA CENTER, SHALL COLLECT,
3 MAINTAIN, OR DISSEMINATE SUCH INFORMATION EXCEPT IN ACCORDANCE WITH THE
4 PROVISIONS OF THIS SECTION.
5 (A) NO INFORMATION SHALL BE KNOWINGLY RECEIVED, MAINTAINED, OR DISSEM-
6 INATED THAT HAS BEEN OBTAINED IN VIOLATION OF ANY APPLICABLE FEDERAL,
7 STATE, OR LOCAL LAW, ORDINANCE, OR REGULATION.
8 (B) ALL PROTECTED INFORMATION SHALL BE EVALUATED FOR THE RELIABILITY
9 OF ITS SOURCE AND THE ACCURACY OF ITS CONTENT PRIOR TO BEING RECORDED IN
10 ANY INVESTIGATION FILE.
11 (C) PROTECTED INFORMATION SHALL BE DISSEMINATED ONLY TO LAW ENFORCE-
12 MENT AGENCIES, CONTINGENT UPON REVIEW AND PRIOR WRITTEN AUTHORIZATION BY
13 THE HEAD OF THE ORIGINATING LAW ENFORCEMENT AGENCY OR INTELLIGENCE DATA
14 CENTER. A RECORD OF ANY SUCH WRITTEN AUTHORIZATION SHALL BE MAINTAINED
15 FOR A MINIMUM OF FIVE YEARS.
16 (D) ALL INVESTIGATIONS UNDERTAKEN ON THE BASIS OF ANY PROTECTED INFOR-
17 MATION SHALL FIRST BE AUTHORIZED IN WRITING BY THE HEAD OF THE INVESTI-
18 GATING LAW ENFORCEMENT AGENCY OR INTELLIGENCE DATA CENTER. A RECORD OF
19 ANY SUCH WRITTEN AUTHORIZATION SHALL BE MAINTAINED IN THE CORRESPONDING
20 INVESTIGATION FILE FOR A MINIMUM OF FIVE YEARS.
21 (E) ALL INFORMATION RECORDED IN ANY INVESTIGATION FILE SHALL BE
22 REVIEWED AT LEAST ONCE EVERY FIVE YEARS, AND ANY INFORMATION THAT IS NOT
23 RELIABLE, ACCURATE, RELEVANT, AND TIMELY, SHALL BE DESTROYED, PROVIDED
24 HOWEVER, THAT ANY DOCUMENTS RELATED TO THE AUTHORIZATION FOR AND TERMI-
25 NATION OF INVESTIGATIONS BASED IN WHOLE OR IN PART ON PROTECTED INFORMA-
26 TION COLLECTED UNDER SUBDIVISION ONE OF THIS SECTION, AND ANY AUTHORI-
27 ZATION TO DISSEMINATE SUCH PROTECTED INFORMATION, SHALL BE RETAINED.
28 S 3. This act shall take effect on the one hundred eightieth day after
29 it shall have become a law; provided, however, that effective immediate-
30 ly, the addition, amendment and/or repeal of any rule or regulation
31 necessary for the implementation of this act on its effective date is
32 authorized and directed to be made and completed on or before such
33 effective date.
