Bill Text: NY S06912 | 2017-2018 | General Assembly | Introduced
Bill Title: Provides that if the person or business providing the notification was the source of the breach, an offer to provide appropriate identity theft prevention and mitigation services, shall be provided at no cost to the affected person for not less than 12 months, along with all information necessary to take advantage of the offer to any person whose information was or may have been breached if the breach exposed or may have exposed personal information.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Introduced - Dead) 2018-01-03 - REFERRED TO CONSUMER PROTECTION [S06912 Detail]
Download: New_York-2017-S06912-Introduced.html
STATE OF NEW YORK ________________________________________________________________________ 6912 2017-2018 Regular Sessions IN SENATE October 13, 2017 ___________ Introduced by Sen. CARLUCCI -- read twice and ordered printed, and when printed to be committed to the Committee on Rules AN ACT to amend the general business law, in relation to credit monitor- ing services The People of the State of New York, represented in Senate and Assem- bly, do enact as follows: 1 Section 1. Subdivision 7 of section 899-aa of the general business 2 law, as added by chapter 442 of the laws of 2005, is amended to read as 3 follows: 4 7. Regardless of the method by which notice is provided, such notice 5 shall include contact information for the person or business making the 6 notification and a description of the categories of information that 7 were, or are reasonably believed to have been, acquired by a person 8 without valid authorization, including specification of which of the 9 elements of personal information and private information were, or are 10 reasonably believed to have been, so acquired. If the person or busi- 11 ness providing the notification was the source of the breach, an offer 12 to provide appropriate identity theft prevention and mitigation 13 services, shall be provided at no cost to the affected person for not 14 less than twelve months, along with all information necessary to take 15 advantage of the offer to any person whose information was or may have 16 been breached if the breach exposed or may have exposed personal infor- 17 mation as defined in subdivision one of this section. 18 § 2. This act shall take effect immediately. EXPLANATION--Matter in italics (underscored) is new; matter in brackets [] is old law to be omitted. LBD13605-01-7
