What's happening
This bill requires businesses responsible for data breaches to offer at least twelve months of free identity theft prevention services to affected individuals.
Why it matters
Shifts financial responsibility to businesses. by requiring them to pay for identity theft prevention services after a data breach they caused, rather than leaving individuals to cover these costs themselves.
Establishes a minimum standard of protection. (at least twelve months) for individuals whose personal information may have been exposed, ensuring longer-term support as identity theft risks can persist well after a breach.
Strengthens consumer notification requirements. by mandating that breach notifications include not only details of what data was compromised, but also clear instructions and information necessary for affected individuals to access free protection services.
Creates a potential incentive for better data security. among businesses, since those that fail to protect consumer information will face additional direct costs and obligations after a breach.
Albany, before your first meeting.
Every bill that moved yesterday, summarized in a sentence and ranked by impact. The Albany Scorecard follows on Sundays.
Free. Unsubscribe in one click. Want alerts on specific bills? Create an account.
Who cares
Headline styles
Free Credit Monitoring After Breach
Plain English, a few words. Used as the page title.
Sponsors
No co-sponsors yet.
History
- Referred to consumer affairs and protection
- Referred to consumer affairs and protection
Companion bill
The same bill in the other chamber. A bill becomes law when one version passes both houses and the governor signs it, so either number can carry it.
Free Credit Monitoring After Breach
In Senate Committee · Consumer Protection · Sponsor David Carlucci
Full text
1 pageUnderlined is new[Struck] is removedOfficial text on nysenate.gov ↗
STATE OF NEW YORK
2868
2019-2020 Regular Sessions
IN ASSEMBLY
January 28, 2019
Introduced by M. of A. FAHY -- read once and referred to the Committee on Consumer Affairs and Protection
AN ACT to amend the general business law, in relation to credit monitoring services
The People of the State of New York, represented in Senate and Assembly, do enact as follows:
Section 1. Subdivision 7 of section 899-aa of the general business law, as added by chapter 442 of the laws of 2005, is amended to read as follows:
7. Regardless of the method by which notice is provided, such notice shall include contact information for the person or business making the notification and a description of the categories of information that were, or are reasonably believed to have been, acquired by a person without valid authorization, including specification of which of the elements of personal information and private information were, or are reasonably believed to have been, so acquired. If the person or business providing the notification was the source of the breach, an offer to provide appropriate identity theft prevention and mitigation services, shall be provided at no cost to the affected person for not less than twelve months, along with all information necessary to take advantage of the offer to any person whose information was or may have been breached if the breach exposed or may have exposed personal information as defined in subdivision one of this section.
§ 2. This act shall take effect immediately.
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD02293-01-9
Reflowed for reading: line numbers and page breaks removed. Cite the official text.
Summaries, headlines and scores are AI-generated from the official bill text. How we score bills. Source: NYS Open Legislation.