New York S02152 requires businesses to offer identity theft prevention and mitigation services to residents after a security breach, with exemptions.
New York S02152 mandates that businesses provide identity theft prevention and mitigation services to residents whose social security numbers were disclosed in a security breach. These services must be offered at no cost for at least twenty-four months. The bill exempts small businesses and individuals demonstrating financial hardship from this requirement. The services include credit report monitoring, identity theft prevention, and, if applicable, identity theft mitigation.
Included in complete analysis
- Overview
- Core Provisions
- Implementation
- Impact
- Legal Framework
- Critical Issues
See what it does, who it affects, and the critical issues in plain language. Free, 30 seconds.