A08906 New York: Requires entities that access a consumer's…