Requires businesses to offer free identity theft prevention services for at least 12 months if they are the source of a data breach.

The bill amends the general business law to mandate that businesses provide free identity theft prevention and mitigation services for at least 12 months to individuals affected by a data breach if the business was the source of the breach. The offer must include all necessary information to take advantage of the services. The services are to be provided to any person whose information was or may have been breached if the breach exposed or may have exposed personal information. This act takes effect immediately.

Requires businesses to offer free identity theft prevention services for at least 12 months if they are the source of a data breach.

The bill amends the general business law to mandate that businesses provide free identity theft prevention and mitigation services for at least 12 months to individuals affected by a data breach if the business was the source of the breach. The offer must include all necessary information to take advantage of the services. The services are to be provided to any person whose information was or may have been breached if the breach exposed or may have exposed personal information. This act takes effect immediately.