Requires notification of identity theft prevention services if a breach exposed personal information.

New York S03078 amends the general business law to mandate that if a breach exposed personal information, the entity responsible for the breach must offer identity theft prevention and mitigation services at no cost for at least 12 months. This includes providing necessary information to take advantage of the offer. The law applies to any person whose information was or may have been breached.

Requires notification of identity theft prevention services if a breach exposed personal information.

New York S03078 amends the general business law to mandate that if a breach exposed personal information, the entity responsible for the breach must offer identity theft prevention and mitigation services at no cost for at least 12 months. This includes providing necessary information to take advantage of the offer. The law applies to any person whose information was or may have been breached.