State to require greater public notification of data breaches

[Destry Winant <destry () riskbasedsecurity com>]

https://www.wwnytv.com/2019/07/25/state-require-greater-public-notification-data-breaches/

New York state is strengthening a law requiring companies that handle
consumers’ personal data to notify them about any data breaches.

Gov. Andrew Cuomo, a Democrat, on Thursday signed legislation that
expands the law to cover any company holding personal data belonging
to a New Yorker, and not just companies doing business in the state.

The new law, which takes effect in 240 days, will also add email
addresses and passwords and biometric data to the list of information
covered by the law.

The measure aims to ensure consumers know if personal data such as
Social Security numbers are obtained by hackers.

Cuomo also signed a bill Thursday that requires credit reporting
agencies to provide identify theft prevention services to consumers
when their data is exposed during a breach.
_______________________________________________
BreachExchange mailing list sponsored by Risk Based Security
BreachExchange () lists riskbasedsecurity com

If you wish to Edit your membership or Unsubscribe you can do so at the following link:
https://lists.riskbasedsecurity.com/listinfo/breachexchange