N.Y. STT Law § 103-F

§ 103-f. Cybersecurity awareness training. 1. (a) Employees of the\nstate who use technology as a part of their official job duties shall\ntake annual cybersecurity awareness training beginning January first,\ntwo thousand twenty-six. Employees of the state shall be required to\ncomplete the training provided by the office.\n (b) For purposes of this section, "employees of the state" shall\ninclude employees of all state agencies and all public benefit\ncorporations, the heads of which are appointed by the governor.\n 2. Employees of a county, a city, a town, a village, or a district as\ndefined in section one hundred nineteen-n of the general municipal law,\nwho use technology as a part of their official job duties shall take\nannual cybersecurity awareness training beginning January first, two\nthousand twenty-six. The office shall make a cybersecurity training\navailable for use by a county, a city, a town, a village, or a district\nas defined in section one hundred nineteen-n of the general municipal\nlaw, at no charge, provided however, no employee of a county, a city, a\ntown, a village, or a district as defined in section one hundred\nnineteen-n of the general municipal law shall be required to complete\nsuch training provided by the office and the cybersecurity awareness\ntraining requirements of this section may be satisfied by the completion\nof other cybersecurity awareness training.\n 3. All training mandated by this section shall be conducted during the\nemployee's regular working hours and employees shall receive\ncompensation at their regular rate of pay for any time spent\nparticipating in such training.\n