Source: https://www.nysenate.gov/legislation/bills/2019/s2475
Timestamp: 2020-03-29 16:12:20
Document Index: 354743219

Matched Legal Cases: ['§6430', '§  2', '§ 156', '§ 3', '§ 156', '§ 4', '§ 156', '§ 5', '§ 156', '§  6', '§ 156', '§ 7', '§ 156', '§  8', '§ 156', '§  9', '§ 156', '§  10', '§ 156', '§ 11', '§ 156', '§ 12']

NY State Senate Bill S2475
senate Bill S2475
Relates to computer-related crimes
Get Status Alerts for S2475
Jan 27, 2020 1st report cal.281
Apr 08, 2019 1st report cal.393
S2475 (ACTIVE) - Details
Amd Pen L, generally; amd §6430, Ed L
2015-2016: S7382
2017-2018: S4670
S2475 (ACTIVE) - Summary
S2475 (ACTIVE) - Sponsor Memo
BILL NUMBER: S2475
TITLE OF BILL:  An act to amend the penal law and the education law,
in relation to computer-related crimes
To update the computer-related crimes provisions of the law.
Section 1 amends section 156.00 of the penal law, as amended by chapter
558 of the laws of 2006, by adding more detailed definitions to cover a
more modern range of circumstances, and including definitions for
computer system, government computer system, public safety infrastruc-
ture computer system, supporting documentation, injury, victim expendi-
ture, computer contaminant, Internet domain name, electronic mail and
Section 2 amends section 156.29 of the penal law, as added by chapter
590 of the laws of 2008, to broaden the meaning of unlawful duplication
of computer related material in the second degree from impermissibly
copying computer material containing medical records to impermissibly
copying or using any data from a computer, computer system or computer
Section 3 amends section 156.25 of the penal law, as amended by chapter
89 of the laws of 1993, subdivision 2 as amended by chapter 376 of the
laws of 1997, by expanding the meaning of computer tampering in the
third degree to include intent to devise or execute a scheme to defraud,
deceive or extort; intent to wrongfully control or obtain money, proper-
ty or data; and altering or destroying data, computer software or
computer programs which reside or exist internal or external to a public
safety infrastructure computer system computer, computer system or
Section 4 amends the penal law by adding a new section 156.45 establish-
ing unlawful disruption of computer services in the second degree, a
class A misdemeanor involving knowingly and without permission disrupt-
ing or causing the disruption of computer services or denying or causing
the denial of computer services to an authorized user of a computer,
Section 5 amends the penal law by adding a new section 156.46 establish-
ing unlawful disruption of computer services in the first degree, a
class E felony involving committing unlawful disruption of computer
services in the second degree against government computer services or
public safety infrastructure computer system computer services.
Section 6 amends the penal law by adding a new section 156.15 establish-
ing unlawful computer access assistance in the second degree, a class A
misdemeanor involving knowingly and without permission providing or
assisting in providing a means of accessing a computer, computer system
or computer network in violation of this article.
Section 7 amends the penal law by adding a new section 156.16 establish-
ing unlawful computer access assistance in the first degree, a class E
felony involving committing unlawful computer access assistance in the
second degree against a public safety infrastructure computer system
computer, computer system or computer network in violation of this arti-
Section 8 amends the penal law by adding a new section 156.12 establish-
ing unauthorized use of Internet domain name or profile, a class A
misdemeanor involving doing so in connection with sending e-mail
messages or posts causing damage to a computer, computer data, computer
system or computer network
Section 9 amends the penal law by adding a new section 156.37 establish-
ing unlawful introduction of a computer contaminant, a class A misdemea-
Section 10 amends the penal law by adding a new section 156.55 providing
for civil remedies available to those suffering damages by reason of a
violation of any section of this article. The statute of limitations for
such civil action is three years of the date of the offense, or the date
of the discovery of damage, whichever is later.
Section 11 amends the penal law by adding a new section 156.50 providing
any computer, computer system, computer network or any software or data
owned by the defendant used during the commission of any offense
described in this article or any computer owned by the defendant used as
a repository for the storage of software or data illegally obtained in
violation of this article shall he subject to forfeiture.
Section 12 amends subdivision 1 of section 6430 of the education law, as
amended by chapter 75 of the laws of 2004, providing computer-related
crimes shall be included as specific rule violations in college poli-
Section 13 provides this act shall take effect on the one hundred eight-
ieth day after it shall have become a law.
Existing computer-related crimes law is not defined well enough to
In today's world of cyber terrorism and technological warfare, it is
essential to modernize the state's computer-related crimes law. This
includes establishing definitions of terms, expanding provisions, estab-
lishing more specific offenses and providing civil remedies.
04/25/16 Referred to Codes
S2475 (ACTIVE) - Bill Text download pdf
AN ACT to amend the penal law and the  education  law,  in  relation  to
Section 1. Section 156.00 of the penal law, as amended by chapter  558
The  following definitions are applicable to this chapter except where
1. "Computer" means a device or group of  devices  which,  by  manipu-
lation  of  electronic,  magnetic,  optical or electrochemical impulses,
pursuant to a computer program, can  automatically  perform  arithmetic,
logical,  storage  or retrieval operations with or on computer data, and
includes any connected or directly related device, equipment or facility
which enables such computer to store, retrieve or communicate to or from
a person, another computer or another device  the  results  of  computer
operations, computer programs or computer data.
2.  "Computer  program"  is  property and means an ordered set of data
representing coded instructions or statements  that,  when  executed  by
computer,  cause  the  computer,  COMPUTER SYSTEM OR COMPUTER NETWORK to
process data or direct the computer, COMPUTER SYSTEM OR COMPUTER NETWORK
to perform one or more computer operations or both and  may  be  in  any
form,  including magnetic storage media, punched cards, or stored inter-
nally in the memory of the computer.
3. "Computer data" is property and means a representation of  informa-
tion,  knowledge,  facts, concepts or instructions which are being proc-
essed, or have been processed in a computer and  may  be  in  any  form,
LBD08736-01-9
S. 2475                             2
programs  from  one computer to another , INCLUDING, BUT NOT LIMITED TO,
COMPUTER  TIME,  DATA  PROCESSING, STORAGE FUNCTIONS, INTERNET SERVICES,
ELECTRONIC MAIL SERVICES, ELECTRONIC MESSAGE SERVICES, OR OTHER USE OF A
5. "Computer material" is property and  means  any  computer  data  or
identified  or readily identifiable individual or individuals. This term
shall not apply to the gaining access to or duplication  solely  of  the
medical  history or medical treatment records of a person by that person
or by another specifically authorized by the person  whose  records  are
sion  thereof or any governmental instrumentality within the state which
contains any information concerning a person, as defined in  subdivision
seven  of  section 10.00 of this chapter, which because of name, number,
which is otherwise prohibited by law from  being  disclosed.  This  term
shall  not  apply  to  the  gaining  access  to or duplication solely of
accords or may accord such rightful possessors an advantage over compet-
itors or other persons who do not have knowledge or the benefit thereof.
6.  "Computer  network" means the interconnection of hardwire or wire-
complex  consisting  of two or more interconnected computers, INCLUDING,
BUT NOT LIMITED TO, DISPLAY TERMINALS, REMOTE SYSTEMS,  MOBILE  DEVICES,
AND PRINTERS CONNECTED BY COMPUTER FACILITIES.
7.  "Access"  means  to GAIN ENTRY TO, instruct, CAUSE INPUT TO, CAUSE
OUTPUT FROM, CAUSE DATA PROCESSING WITH, communicate  with,  store  data
in, retrieve from, or otherwise make use of any resources of a computer,
COMPUTER  SYSTEM  OR  COMPUTER NETWORK, physically, directly or by elec-
permission. It shall also mean the access of a  computer  service  by  a
person  without  permission  where such person knew that such access was
without permission or after actual notice  to  such  person,  that  such
Proof  that  such person used or accessed a computer, computer service
or computer network through the knowing use of a  set  of  instructions,
code  or  computer  program that bypasses, defrauds or otherwise circum-
on the computer, computer service or computer network shall be  presump-
tive  evidence that such person used or accessed such computer, computer
S. 2475                             3
10. "COMPUTER SYSTEM" MEANS A DEVICE OR COLLECTION OF DEVICES, INCLUD-
ING  SUPPORT DEVICES AND EXCLUDING CALCULATORS THAT ARE NOT PROGRAMMABLE
AND CAPABLE OF BEING USED IN CONJUNCTION WITH  EXTERNAL  FILES,  ONE  OR
MORE  OF WHICH CONTAIN COMPUTER PROGRAMS, ELECTRONIC INSTRUCTIONS, INPUT
DATA, AND OUTPUT DATA,  THAT  PERFORMS  FUNCTIONS,  INCLUDING,  BUT  NOT
LIMITED  TO,  LOGIC,  ARITHMETIC,  DATA  STORAGE AND RETRIEVAL, COMMUNI-
CATION, AND CONTROL.
11. "GOVERNMENT COMPUTER SYSTEM" MEANS ANY COMPUTER  SYSTEM,  OR  PART
THEREOF,  THAT  IS  OWNED,  OPERATED,  OR USED BY ANY FEDERAL, STATE, OR
12. "PUBLIC SAFETY INFRASTRUCTURE COMPUTER SYSTEM" MEANS ANY  COMPUTER
SYSTEM,  OR PART THEREOF, THAT IS NECESSARY FOR THE HEALTH AND SAFETY OF
THE PUBLIC INCLUDING COMPUTER SYSTEMS OWNED, OPERATED, OR USED BY DRINK-
ING WATER AND  WASTEWATER  TREATMENT  FACILITIES,  HOSPITALS,  EMERGENCY
SERVICE  PROVIDERS,  TELECOMMUNICATION  COMPANIES,  AND GAS AND ELECTRIC
13. "SUPPORTING DOCUMENTATION" INCLUDES, BUT IS NOT  LIMITED  TO,  ALL
INFORMATION,  IN ANY FORM, PERTAINING TO THE DESIGN, CONSTRUCTION, CLAS-
SIFICATION, IMPLEMENTATION, USE, OR MODIFICATION OF A COMPUTER, COMPUTER
SYSTEM, COMPUTER NETWORK, COMPUTER PROGRAM, OR COMPUTER SOFTWARE,  WHICH
INFORMATION  IS  NOT  GENERALLY AVAILABLE TO THE PUBLIC AND IS NECESSARY
FOR THE OPERATION OF A  COMPUTER,  COMPUTER  SYSTEM,  COMPUTER  NETWORK,
COMPUTER PROGRAM, OR COMPUTER SOFTWARE.
14. "INJURY" MEANS ANY ALTERATION, DELETION, DAMAGE, OR DESTRUCTION OF
A COMPUTER SYSTEM, COMPUTER NETWORK, COMPUTER PROGRAM, OR DATA CAUSED BY
THE  ACCESS,  OR  THE DENIAL OF ACCESS TO LEGITIMATE USERS OF A COMPUTER
SYSTEM, NETWORK, OR PROGRAM.
15. "VICTIM EXPENDITURE" MEANS ANY EXPENDITURE REASONABLY  AND  NECES-
SARILY INCURRED BY THE OWNER OR LESSEE TO VERIFY THAT A COMPUTER SYSTEM,
COMPUTER  NETWORK,  COMPUTER  PROGRAM,  OR  DATA WAS OR WAS NOT ALTERED,
DELETED, DAMAGED, OR DESTROYED BY THE ACCESS.
16. "COMPUTER CONTAMINANT" MEANS ANY SET OF COMPUTER INSTRUCTIONS THAT
ARE DESIGNED TO MODIFY, DAMAGE, DESTROY, RECORD, OR TRANSMIT INFORMATION
WITHIN A COMPUTER, COMPUTER SYSTEM,  OR  COMPUTER  NETWORK  WITHOUT  THE
INTENT  OR PERMISSION OF THE OWNER OF THE INFORMATION. THEY INCLUDE, BUT
ARE NOT LIMITED TO, A GROUP OF  COMPUTER  INSTRUCTIONS  COMMONLY  CALLED
VIRUSES  OR WORMS, THAT ARE SELF-REPLICATING OR SELF-PROPAGATING AND ARE
DESIGNED TO  CONTAMINATE  OTHER  COMPUTER  PROGRAMS  OR  COMPUTER  DATA,
CONSUME  COMPUTER  RESOURCES, MODIFY, DESTROY, RECORD, OR TRANSMIT DATA,
OR IN SOME OTHER FASHION USURP THE NORMAL  OPERATION  OF  THE  COMPUTER,
17.  "INTERNET  DOMAIN  NAME"  MEANS  A  GLOBALLY UNIQUE, HIERARCHICAL
REFERENCE TO AN INTERNET HOST OR SERVICE, ASSIGNED  THROUGH  CENTRALIZED
INTERNET  NAMING  AUTHORITIES,  COMPRISING A SERIES OF CHARACTER STRINGS
SEPARATED BY PERIODS, WITH THE RIGHTMOST CHARACTER STRING SPECIFYING THE
TOP OF THE HIERARCHY.
18. "ELECTRONIC MAIL" MEANS AN ELECTRONIC  MESSAGE  OR  COMPUTER  FILE
THAT  IS  TRANSMITTED  BETWEEN  TWO  OR MORE TELECOMMUNICATIONS DEVICES;
COMPUTERS; COMPUTER NETWORKS, REGARDLESS OF WHETHER  THE  NETWORK  IS  A
LOCAL,  REGIONAL,  OR  GLOBAL  NETWORK; OR ELECTRONIC DEVICES CAPABLE OF
RECEIVING ELECTRONIC MESSAGES, REGARDLESS  OF  WHETHER  THE  MESSAGE  IS
S. 2475                             4
CONVERTED  TO  HARD COPY FORMAT AFTER RECEIPT, VIEWED UPON TRANSMISSION,
OR STORED FOR LATER RETRIEVAL.
19. "PROFILE" MEANS EITHER OF THE FOLLOWING:
(A)  A  CONFIGURATION  OF USER DATA REQUIRED BY A COMPUTER SO THAT THE
USER MAY ACCESS PROGRAMS OR SERVICES AND HAVE THE DESIRED  FUNCTIONALITY
ON THAT COMPUTER; OR
(B)  AN  INTERNET  WEB  SITE USER'S PERSONAL PAGE OR SECTION OF A PAGE
THAT IS MADE UP OF DATA,  IN  TEXT  OR  GRAPHICAL  FORM,  THAT  DISPLAYS
SIGNIFICANT,  UNIQUE,  OR  IDENTIFYING  INFORMATION,  INCLUDING, BUT NOT
LIMITED TO, LISTING ACQUAINTANCES, INTERESTS, ASSOCIATIONS,  ACTIVITIES,
OR PERSONAL STATEMENTS.
§  2.  Section 156.29 of the penal law, as added by chapter 590 of the
§ 156.29 Unlawful duplication of computer related material in the second
al in the second degree when having no right to do so, he or she copies,
reproduces or duplicates OR MAKES USE OF  in  any  manner  ANY  DATA  OR
computer  material  [that  contains  records  of  the medical history or
individuals with an intent to commit or further the  commission  of  any
crime  under this chapter] FROM A COMPUTER, COMPUTER SYSTEM, OR COMPUTER
NETWORK OR TAKES OR COPIES ANY SUPPORTING DOCUMENTATION, WHETHER  EXIST-
ING  OR RESIDING INTERNAL OR EXTERNAL TO A COMPUTER, COMPUTER SYSTEM, OR
§ 3. Section 156.25 of the penal law, as amended by chapter 89 of  the
§ 156.25 Computer tampering in the third degree.
OR SHE commits the crime of computer tampering in the fourth degree and:
1.  he  OR  SHE  does  so  with an intent: (A) to commit or attempt to
commit or further the commission of any felony, (B) TO DEVISE OR EXECUTE
ANY SCHEME OR ARTIFICE TO DEFRAUD, DECEIVE, OR EXTORT, OR (C) TO  WRONG-
FULLY CONTROL OR OBTAIN MONEY, PROPERTY OR DATA; or
exceeding one thousand dollars; OR
5. HE OR SHE ALTERS IN ANY MANNER OR DESTROYS ANY DATA, COMPUTER SOFT-
WARE, OR COMPUTER PROGRAMS WHICH RESIDE OR EXIST INTERNAL OR EXTERNAL TO
A PUBLIC SAFETY INFRASTRUCTURE COMPUTER SYSTEM COMPUTER, COMPUTER SYSTEM
§ 4. The penal law is amended by adding a new section 156.45  to  read
§ 156.45 UNLAWFUL DISRUPTION OF COMPUTER SERVICES IN THE SECOND DEGREE.
A  PERSON IS GUILTY OF UNLAWFUL DISRUPTION OF COMPUTER SERVICES IN THE
SECOND DEGREE WHEN HE OR SHE KNOWINGLY AND WITHOUT  PERMISSION  DISRUPTS
OR  CAUSES  THE  DISRUPTION OF COMPUTER SERVICES OR DENIES OR CAUSES THE
S. 2475                             5
DENIAL OF COMPUTER SERVICES TO AN AUTHORIZED USER OF A COMPUTER, COMPUT-
ER SYSTEM, OR COMPUTER NETWORK.
UNLAWFUL  DISRUPTION  OF  COMPUTER  SERVICES IN THE SECOND DEGREE IS A
§ 5. The penal law is amended by adding a new section 156.46  to  read
§ 156.46 UNLAWFUL DISRUPTION OF COMPUTER SERVICES IN THE FIRST DEGREE.
FIRST DEGREE WHEN HE OR SHE COMMITS THE CRIME OF UNLAWFUL DISRUPTION  OF
COMPUTER SERVICES IN THE SECOND DEGREE AND:
1. HE OR SHE DISRUPTS GOVERNMENT COMPUTER SERVICES OR DENIES OR CAUSES
THE  DENIAL  OF  GOVERNMENT COMPUTER SERVICES TO AN AUTHORIZED USER OF A
GOVERNMENT COMPUTER, COMPUTER SYSTEM, OR COMPUTER NETWORK; OR
2. HE OR SHE DISRUPTS PUBLIC  SAFETY  INFRASTRUCTURE  COMPUTER  SYSTEM
COMPUTER SERVICES OR DENIES OR CAUSES THE DENIAL OF COMPUTER SERVICES TO
AN  AUTHORIZED  USER  OF  A PUBLIC SAFETY INFRASTRUCTURE COMPUTER SYSTEM
UNLAWFUL DISRUPTION OF COMPUTER SERVICES IN THE  SECOND  DEGREE  IS  A
§  6.  The penal law is amended by adding a new section 156.15 to read
§ 156.15 UNLAWFUL COMPUTER ACCESS ASSISTANCE IN THE SECOND DEGREE.
A PERSON IS GUILTY OF  UNLAWFUL  COMPUTER  ACCESS  ASSISTANCE  IN  THE
SECOND  DEGREE  WHEN HE OR SHE KNOWINGLY AND WITHOUT PERMISSION PROVIDES
OR ASSISTS IN PROVIDING  A  MEANS  OF  ACCESSING  A  COMPUTER,  COMPUTER
SYSTEM, OR COMPUTER NETWORK IN VIOLATION OF THIS ARTICLE.
UNLAWFUL  COMPUTER ACCESS ASSISTANCE IN THE SECOND DEGREE IS A CLASS A
§ 7. The penal law is amended by adding a new section 156.16  to  read
§ 156.16 UNLAWFUL COMPUTER ACCESS ASSISTANCE IN THE FIRST DEGREE.
A PERSON IS GUILTY OF UNLAWFUL COMPUTER ACCESS ASSISTANCE IN THE FIRST
DEGREE  WHEN  HE  OR  SHE  COMMITS THE CRIME OF UNLAWFUL COMPUTER ACCESS
ASSISTANCE IN THE SECOND DEGREE AND PROVIDES OR ASSISTS IN  PROVIDING  A
MEANS  OF  ACCESSING  A  PUBLIC  SAFETY  INFRASTRUCTURE  COMPUTER SYSTEM
UNLAWFUL COMPUTER ACCESS ASSISTANCE IN THE FIRST DEGREE IS A  CLASS  E
§  8.  The penal law is amended by adding a new section 156.12 to read
§ 156.12 UNAUTHORIZED USE OF INTERNET DOMAIN NAME OR PROFILE.
A PERSON IS GUILTY OF UNAUTHORIZED USE  OF  INTERNET  DOMAIN  NAME  OR
PROFILE  WHEN HE OR SHE KNOWINGLY AND WITHOUT PERMISSION USES THE INTER-
NET DOMAIN NAME OR PROFILE OF ANOTHER INDIVIDUAL, CORPORATION, OR ENTITY
IN CONNECTION WITH THE SENDING OF ONE OR MORE ELECTRONIC  MAIL  MESSAGES
OR  POSTS  AND  THEREBY DAMAGES OR CAUSES DAMAGE TO A COMPUTER, COMPUTER
DATA, COMPUTER SYSTEM OR COMPUTER NETWORK.
UNAUTHORIZED USE OF INTERNET DOMAIN NAME  OR  PROFILE  IS  A  CLASS  A
§  9.  The penal law is amended by adding a new section 156.37 to read
§ 156.37 UNLAWFUL INTRODUCTION OF A COMPUTER CONTAMINANT.
A PERSON IS GUILTY OF UNLAWFUL INTRODUCTION OF A COMPUTER  CONTAMINANT
WHEN  HE  OR  SHE  KNOWINGLY  INTRODUCES A COMPUTER CONTAMINANT INTO ANY
S. 2475                             6
UNLAWFUL INTRODUCTION OF A COMPUTER CONTAMINANT IS A CLASS A MISDEMEA-
§  10. The penal law is amended by adding a new section 156.55 to read
§ 156.55 CIVIL ACTIONS.
1. IN ADDITION TO ANY OTHER  CIVIL  REMEDY  AVAILABLE,  THE  OWNER  OR
LESSEE  OF  THE  COMPUTER,  COMPUTER  SYSTEM, COMPUTER NETWORK, COMPUTER
PROGRAM, OR DATA WHO SUFFERS DAMAGE OR LOSS BY REASON OF A VIOLATION  OF
ANY  SECTION OF THIS ARTICLE MAY BRING A CIVIL ACTION AGAINST THE VIOLA-
TOR FOR COMPENSATORY DAMAGES AND INJUNCTIVE RELIEF  OR  OTHER  EQUITABLE
RELIEF.    COMPENSATORY DAMAGES SHALL INCLUDE ANY EXPENDITURE REASONABLY
AND NECESSARILY INCURRED BY THE OWNER OR LESSEE TO VERIFY THAT A COMPUT-
ER SYSTEM, COMPUTER NETWORK, COMPUTER PROGRAM, OR DATA WAS  OR  WAS  NOT
ALTERED, DAMAGED, OR DELETED BY THE ACCESS. IN ANY ACTION BROUGHT PURSU-
ANT TO THIS SECTION, THE COURT MAY AWARD REASONABLE ATTORNEY'S FEES. FOR
THE  PURPOSES  OF  ACTIONS AUTHORIZED BY THIS SECTION, THE CONDUCT OF AN
UNEMANCIPATED MINOR SHALL BE IMPUTED TO THE  PARENT  OR  LEGAL  GUARDIAN
HAVING CONTROL OR CUSTODY OF THE MINOR.
2.  NO  ACTION  MAY  BE BROUGHT PURSUANT TO THIS SECTION FOR A WILLFUL
VIOLATION OF THIS ARTICLE UNLESS IT IS INITIATED WITHIN THREE  YEARS  OF
THE  DATE  OF THE ACT COMPLAINED OF, OR THE DATE OF THE DISCOVERY OF THE
DAMAGE, WHICHEVER IS LATER.
§ 11. The penal law is amended by adding a new section 156.60 to  read
§ 156.60 OFFENSES INVOLVING COMPUTERS; FORFEITURE.
ANY  COMPUTER,  COMPUTER  SYSTEM, COMPUTER NETWORK, OR ANY SOFTWARE OR
DATA, OWNED BY THE DEFENDANT, THAT IS USED DURING THE COMMISSION OF  ANY
OFFENSE  DESCRIBED IN THIS ARTICLE OR ANY COMPUTER, OWNED BY THE DEFEND-
ANT, WHICH IS USED AS A REPOSITORY FOR THE STORAGE OF SOFTWARE  OR  DATA
ILLEGALLY  OBTAINED  IN  VIOLATION  OF  THIS ARTICLE SHALL BE SUBJECT TO
§ 12. Subdivision 1 of section 6430 of the education law,  as  amended
by chapter 75 of the laws of 2004, is amended to read as follows:
1. The trustees or other governing board of every college chartered by
the  regents or incorporated by special act of the legislature and which
maintains a campus, unless otherwise provided, shall adopt written rules
for implementing all policies required pursuant to this article and  for
the  maintenance  of  public order on college campuses and other college
property used for educational purposes and provide  a  program  for  the
enforcement  thereof. Such rules shall prohibit, among other things, any
action or situation which recklessly or intentionally  endangers  mental
or physical health or involves the forced consumption of liquor or drugs
for the purpose of initiation into or affiliation with any organization.
Such rules shall govern the conduct of students, faculty and other staff
as  well  as  visitors and other licensees and invitees on such campuses
and property AND SHALL INCLUDE COMPUTER-RELATED  CRIMES  AS  A  SPECIFIC
VIOLATION  OF  SUCH  RULES.   The penalties for violations of such rules
shall be clearly set forth therein and shall include provisions for  the
ejection  of  a violator from such campus and property, in the case of a
student or faculty violator his or her suspension, expulsion,  or  other
appropriate  disciplinary  action,  and  in  the case of an organization
which authorizes such conduct, recision of permission for that organiza-
tion to operate on campus property AND SHALL ALSO INCLUDE PENALTIES  FOR
COMPUTER-RELATED CRIMES THAT MAY SUBJECT A STUDENT TO DISCIPLINARY SANC-
TIONS  UP  TO AND INCLUDING DISMISSAL FROM THE INSTITUTION.  Such penal-
S. 2475                             7
ties shall be in addition to any penalty pursuant to the  penal  law  or
any other law to which a violator or organization may be subject.