Loading chat...
NY S03078
Bill
Status
3/10/2026
Primary Sponsor
Leroy Comrie
Click for details
AI Summary
-
Requires businesses or persons that are the source of a data breach to provide free identity theft prevention and mitigation services to affected individuals for at least 12 months
-
Mandates that breach notifications include all information necessary for affected persons to take advantage of the free identity theft services
-
Applies when a breach exposed or may have exposed personal information as defined in the general business law
-
Amends Section 899-aa of the General Business Law, which governs data breach notification requirements
-
Takes effect immediately upon enactment
Legislative Description
Provides that if the person or business providing the notification was the source of the breach, an offer to provide appropriate identity theft prevention and mitigation services, shall be provided at no cost to the affected person for not less than 12 months, along with all information necessary to take advantage of the offer to any person whose information was or may have been breached if the breach exposed or may have exposed personal information.
Last Action
referred to consumer affairs and protection
3/10/2026