Bill Text: NY A06866 | 2015-2016 | General Assembly | Amended

---

Bill Title: Relates to the data security act.

Spectrum: Slight Partisan Bill (Democrat 6-2)

Status: (Introduced - Dead) 0000-00-00 - [A06866 Detail]

Download: New_York-2015-A06866-Amended.html

---

                STATE OF NEW YORK
        ________________________________________________________________________
                                          6866
                               2015-2016 Regular Sessions
                   IN ASSEMBLY
                                      April 8, 2015
                                       ___________
        Introduced by M. of A. DINOWITZ -- (at request of the Department of Law)
          --  read  once  and  referred to the Committee on Consumer Affairs and
          Protection
        AN ACT to amend the general business law and the state  technology  law,
          in relation to the data security act
          The  People of the State of New York, represented in Senate and Assem-
        bly, do enact as follows:
     1    Section 1. This act shall be known and may be cited as the "data secu-
     2  rity act".
     3    § 2. The opening paragraph and  paragraph  (b)  of  subdivision  1  of
     4  section  899-aa  of the general business law, as added by chapter 442 of
     5  the laws of 2005, are amended to read as follows:
     6    As used in this section, and section eight hundred  ninety-nine-bb  of
     7  this article, the following terms shall have the following meanings:
     8    (b)  "Private information" shall mean either: (i) personal information
     9  consisting of any information in combination with any one or more of the
    10  following data elements, when either the  personal  information  or  the
    11  data  element is not encrypted, or encrypted with an encryption key that
    12  has also been acquired:
    13    (1) social security number;
    14    (2) driver's license number or non-driver identification card  number;
    15  [or]
    16    (3)  account  number, credit or debit card number, in combination with
    17  any required security code, access code, or password that  would  permit
    18  access to an individual's financial account; or
    19    (4)  biometric  information, meaning data generated by automatic meas-
    20  urements of an individual's physical characteristics, which are used  by
    21  the owner or licensee to authenticate the individual's identity;
    22    (ii)  a  user  name or email address in combination with a password or
    23  security question and answer that  would  permit  access  to  an  online
    24  account; or
         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD08145-09-5