Bill > A01374

This bill requires businesses that experience a security breach involving a social security number to offer affected New York state residents free credit monitoring, identity theft prevention, and identity theft mitigation services for at least 24 months. The services must be provided at no cost to residents whose social security numbers were disclosed or potentially disclosed during the breach. The bill includes an important exemption for individual persons and small businesses that can demonstrate financial hardship, allowing them to request a waiver from the department of financial services. The key terms include "security breach" (an incident where sensitive personal information is exposed), "identity theft prevention services" (proactive measures to protect against unauthorized use of personal information), and "identity theft mitigation services" (actions taken to minimize damage after personal information has been compromised). The legislation aims to provide additional protection and support for consumers whose personal information has been potentially compromised in a data breach, while also recognizing the potential financial strain such requirements might place on smaller businesses.

Business and Industry

https://www.nysenate.gov/legislation/bills/2025/A1374