S T A T E O F N E W Y O R K
________________________________________________________________________
6701
2019-2020 Regular Sessions
I N S E N A T E
September 11, 2019
___________
Introduced by Sen. CARLUCCI -- read twice and ordered printed, and when
printed to be committed to the Committee on Rules
AN ACT to amend the general business law, in relation to credit monitor-
ing services
THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
BLY, DO ENACT AS FOLLOWS:
Section 1. Subdivision 7 of section 899-aa of the general business
law, as added by chapter 442 of the laws of 2005, is amended to read as
follows:
7. Regardless of the method by which notice is provided, such notice
shall include contact information for the person or business making the
notification and a description of the categories of information that
were, or are reasonably believed to have been, acquired by a person
without valid authorization, including specification of which of the
elements of personal information and private information were, or are
reasonably believed to have been, so acquired. IF THE PERSON OR BUSI-
NESS PROVIDING THE NOTIFICATION WAS THE SOURCE OF THE BREACH, AN OFFER
TO PROVIDE APPROPRIATE IDENTITY THEFT PREVENTION AND MITIGATION
SERVICES, SHALL BE PROVIDED AT NO COST TO THE AFFECTED PERSON FOR NOT
LESS THAN TWELVE MONTHS, ALONG WITH ALL INFORMATION NECESSARY TO TAKE
ADVANTAGE OF THE OFFER TO ANY PERSON WHOSE INFORMATION WAS OR MAY HAVE
BEEN BREACHED IF THE BREACH EXPOSED OR MAY HAVE EXPOSED PERSONAL INFOR-
MATION AS DEFINED IN SUBDIVISION ONE OF THIS SECTION.
§ 2. This act shall take effect immediately.
EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
[ ] is old law to be omitted.
LBD02293-01-9