S T A T E O F N E W Y O R K
________________________________________________________________________
180
2017-2018 Regular Sessions
I N A S S E M B L Y
(PREFILED)
January 4, 2017
___________
Introduced by M. of A. SANTABARBARA, BRINDISI -- read once and referred
to the Committee on Consumer Affairs and Protection
AN ACT to amend the general business law, in relation to disclosure of
breaches of the security of the system
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. Subdivision 2 of section 899-aa of the general business
law, as added by chapter 442 of the laws of 2005, is amended to read as
follows:
2. Any person or business which conducts business in New York state,
and which owns or licenses computerized data which includes private
information shall disclose any breach of the security of the system
[following] WITHIN FIVE DAYS OF THE discovery or notification of the
breach in the security of the system to any resident of New York state
whose private information was, or is reasonably believed to have been,
acquired by a person without valid authorization. [The disclosure shall
be made in the most expedient time possible and without unreasonable
delay, consistent with the legitimate needs of law enforcement, as
provided in subdivision four of this section, or any measures necessary
to determine the scope of the breach and restore the reasonable integri-
ty of the system.]
§ 2. This act shall take effect immediately.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD05228-01-7