New York S00804 amends the general business law to specify when and how notification of a data breach must be provided to the Department of Financial.

New York S00804 amends the general business law to clarify the notification process for data breaches. Specifically, it requires that if any New York residents are to be notified, the person or business must inform the state attorney general, the Department of State, the Division of State Police, and the Department of Financial Services about the timing, content, and distribution of the notices. The notification to the Department of Financial Services is only required if the person or business is a covered entity, as defined in 23 NYCRR 500.1, and must comply with 23 NYCRR 500.17.

New York S00804 amends the general business law to specify when and how notification of a data breach must be provided to the Department of Financial.

New York S00804 amends the general business law to clarify the notification process for data breaches. Specifically, it requires that if any New York residents are to be notified, the person or business must inform the state attorney general, the Department of State, the Division of State Police, and the Department of Financial Services about the timing, content, and distribution of the notices. The notification to the Department of Financial Services is only required if the person or business is a covered entity, as defined in 23 NYCRR 500.1, and must comply with 23 NYCRR 500.17.