New York S 1139: Relates to the disclosure of online advertisements by electronic cigarette companies

Bill Text

Bill Search and Legislative Information | New York State Assembly 

• 

• 

• 

• 

• 

• 

• 

• 

 Skip to main content 

 New York State Assembly

 Speaker Carl E. Heastie

 --> 
 --> 

 --> 

• 
 Assembly Members 

• 
 Legislative Info 

• 
 Public Hearings 

• 
 Speaker's Press 

• 
 Assembly Reports 

• 
 Committees & More 

• Bill Search Home
• Laws
• Legislative Calendar
• Public Hearing Schedule
• Assembly Calendars
• Assembly Committee Agenda 

 Javascript must be enabled to properly view this page. 

 Bill No.: 

• Summary 
• Actions 
• Committee&nbspVotes 
• Floor&nbspVotes 
• Memo 
• Text 
• LFIN 
• Chamber&nbspVideo/Transcript 
S01139 Summary:

BILL NOS01139 

&nbsp

SAME ASSAME AS A06347

&nbsp

SPONSORGONZALEZ

&nbsp

COSPNSR

&nbsp

MLTSPNSR

&nbsp

Amd §202, add §§210 - 212, St Tech L

&nbsp

Requires governmental entities to, whenever possible and feasible, consider implementing multifactor authentication for local and remote network access; requires public websites to encrypt all exchanges and to comply with privacy standards.

Go to top S01139 Actions:

BILL NOS01139 

&nbsp

01/08/2025REFERRED TO INTERNET AND TECHNOLOGY

02/10/2025REPORTED AND COMMITTED TO FINANCE

05/28/20251ST REPORT CAL.1343

05/29/20252ND REPORT CAL.

06/04/2025ADVANCED TO THIRD READING 

06/11/2025PASSED SENATE

06/11/2025DELIVERED TO ASSEMBLY

06/11/2025referred to ways and means

01/07/2026died in assembly

01/07/2026returned to senate

01/07/2026REFERRED TO INTERNET AND TECHNOLOGY

02/25/2026REPORTED AND COMMITTED TO FINANCE

05/19/20261ST REPORT CAL.1194

05/20/20262ND REPORT CAL.

05/21/2026ADVANCED TO THIRD READING 

05/29/2026SUBSTITUTED BY A6347

&nbspA06347 AMEND= Otis

&nbsp03/04/2025referred to science and technology

&nbsp05/06/2025reported referred to ways and means

&nbsp05/27/2025reported referred to rules

&nbsp01/07/2026referred to ways and means

&nbsp05/19/2026reported referred to rules

&nbsp05/20/2026reported 

&nbsp05/20/2026rules report cal.144

&nbsp05/20/2026ordered to third reading rules cal.144

&nbsp05/20/2026passed assembly

&nbsp05/20/2026delivered to senate

&nbsp05/20/2026REFERRED TO INTERNET AND TECHNOLOGY

&nbsp05/29/2026SUBSTITUTED FOR S1139

&nbsp05/29/20263RD READING CAL.1194

&nbsp05/29/2026PASSED SENATE

&nbsp05/29/2026RETURNED TO ASSEMBLY

Go to topS01139 Committee&nbspVotes:

Go to topS01139 Floor&nbspVotes:

There are no Assembly votes for this bill in this legislative session.

Go to topS01139 Text:

 STATE OF NEW YORK
 ________________________________________________________________________

 1139

 2025-2026 Regular Sessions

 IN SENATE

 January 8, 2025
 ___________

 Introduced by Sen. GONZALEZ -- read twice and ordered printed, and when
 printed to be committed to the Committee on Internet and Technology

 AN ACT to amend the state technology law, in relation to requiring
 governmental entities to implement multifactor authentication for
 local and remote network access

 The People of the State of New York, represented in Senate and Assem-
 bly, do enact as follows:

 1 Section 1. Section 202 of the state technology law is amended by
 2 adding two new subdivisions 9 and 10 to read as follows:
 3 9. "Governmental entity" shall mean any state or local department,
 4 board, bureau, division, commission, committee, school district, public
 5 authority, public benefit corporation, council or office, including all
 6 entities defined pursuant to section two of the public authorities law.
 7 Such term shall include the state university of New York and the city
 8 university of New York. Further, such term shall include any county,
 9 city, town or village but shall not include the judiciary or state and
 10 local legislatures.
 11 10. "Multifactor authentication" shall mean using two or more differ-
 12 ent types of identification credentials to achieve authentication. The
 13 types of identification credentials shall include:
 14 (a) knowledge-based credentials, which is a knowledge-based authenti-
 15 cation that requires the user to provide information that they know such
 16 as passwords or PINs;
 17 (b) possession-based credentials, which is authentication that
 18 requires individuals to have something specific in their possession,
 19 such as security tokens, key fobs, SIM cards or smartphone applications;
 20 and
 21 (c) biometric information, which is any measurable physical, physio-
 22 logical or behavioral characteristics that are attributable to a person,
 23 including but not limited to facial characteristics, fingerprint charac-
 24 teristics, hand characteristics, eye characteristics, vocal character-

 EXPLANATION--Matter in italics (underscored) is new; matter in brackets
 [ ] is old law to be omitted.
 LBD01038-01-5

 S. 1139 2

 1 istics, and any other characteristics that can be used to identify a
 2 person including, but not limited to: fingerprints; handprints; retina
 3 and iris patterns; DNA sequence; voice; gait; and facial geometry