New York S08169 requires state entities to notify affected individuals of data breaches involving compromised information.

New York S08169 amends the state technology law to mandate that any state entity, including local governments, must notify affected individuals if their private information is compromised in a data breach. The bill defines a "cybersecurity incident" as an event that jeopardizes the integrity, confidentiality, or availability of computers, information, or communications systems. The notification must occur as soon as possible, without unreasonable delay, and must be consistent with law enforcement needs.

New York S08169 requires state entities to notify affected individuals of data breaches involving compromised information.

New York S08169 amends the state technology law to mandate that any state entity, including local governments, must notify affected individuals if their private information is compromised in a data breach. The bill defines a "cybersecurity incident" as an event that jeopardizes the integrity, confidentiality, or availability of computers, information, or communications systems. The notification must occur as soon as possible, without unreasonable delay, and must be consistent with law enforcement needs.