§ 8-C — Enterprise fraud prevention and detection system

§ 8-c. Enterprise fraud prevention and detection system. 1. In\nfurtherance of the comptroller's constitutional and statutory functions,\nduties and responsibilities, the comptroller may, within his or her\ndiscretion, establish, implement and update as necessary an electronic\ndata analytical enterprise fraud prevention and detection system for the\nprevention of fraud, waste and abuse in state government and the\ndetection and prevention of improper payments of public moneys.\n 2. State agencies shall fully support and cooperate with the state\ncomptroller by providing the state comptroller with access to data\nrequested by the state comptroller, in accordance with applicable state\nand federal law, to allow such data to be integrated into such analytic\nefforts as the state comptroller may deem necessary. For this purpose,\nthe term "state agency" shall mean any of the following performing a\ngovernmental or proprietary function for the executive department of the\nstate: a state department, the state university of New York, the city\nuniversity of New York, and any board, bureau, division, commission,\ncommittee, council, office or similar governmental entity.\n 3. In support of the enterprise fraud prevention and detection system,\nthe state comptroller shall establish protocols:\n (a) for data sharing, secure file transfers and/or other methods to\nobtain real-time, regular and/or periodic data from state agencies,\nprovided, however, that access to such data by the state comptroller\nshall not waive any privilege or right of confidentiality;\n (b) to ensure the safety, security, integrity and privacy of all data\nshared with his or her office in accordance with the system; and\n (c) for the authorized retention and deletion of data obtained from\nstate agencies.\n 4. In connection with such system, the state comptroller, in his or\nher discretion, may:\n (a) develop a long-range plan for preventing or detecting improper\npayments of public moneys, and the prevention and detection of waste,\nfraud and abuse in government operations;\n (b) acquire technology including, but not limited to, software that\nenhances the following capabilities: (i) automated detection and\nalerting; (ii) continuous monitoring of program transactions and\nactivity, to detect fraud and improper payments both prospectively\n(before the payment is made) and retrospectively (after payments are\nmade); (iii) detection of non-transactional fraud such as program\neligibility issues and identify theft; and\n (c) evaluate potential savings resulting from such efforts.\n 5. The state comptroller shall report annually to the legislature no\nlater than the first day of September, two thousand sixteen and annually\nthereafter on the progress, status and results of the system created\npursuant to this section and subdivision two of section twenty-eight\nhundred three of the public authorities law.\n