Requires all state entities to notify affected individuals in the event of a data breach where information is compromised

Summary

The bill obligates any New York state entity that holds or licenses private data to inform affected residents when that data is accessed without authorization. It also requires agencies to alert the data’s owner or licensor if they do not own the information. Prompt notification and a follow‑up security report aim to protect individuals and improve state cybersecurity.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share