BILL NUMBER: S2859

SPONSOR: SKOUFIS
 
TITLE OF BILL:

An act to amend the general business law, in relation to the disposal of
copies of identification documents

 
PURPOSE:

To create a requirement that hotels, resorts, and other boarding/lodging
locations dispose of a guest's identification documents within 24 hours
after their stay is completed.

 
SUMMARY OF PROVISIONS:

Section 1: Amends General Business Law by adding a new section 209-h,
stating that the owner, lessee, proprietor or manager of any hotel,
motel, steamboat, tourist cabins, camp, resort, tavern, inn, boarding or
lodging house shall dispose of any copies of a guest's identification
document, including but not limited to a driver's license, passport, or
non-driver identification card, within twenty-four hours of the guest
              

completing their stay. Disposal of the copies shall include deletion of
any digital copies and the physical destruction of any physical copies
such that it would be infeasible to recreate the copy. The owner,
lessee, proprietor or manager must attempt to contact the guest at least
two times within twenty-four hours before disposal occurs.

Section 2: Sets effective date.

 
JUSTIFICATION:

There has been an increase in data breaches that has led to individual's
personal documentation and information being exposed to and stolen by
cybercriminals. While data breaches of this kind are usually uninten-
tional on the business' end, they can cause irreparable damage to the
victim's financial and personal wellbeing.  This legislation will create
a requirement that an individual's personal identification documentation
is permanently disposed of, both electronically and physically, within
24 hours of completion of their stay at a hotel, resort, camp, and other
lodging location. This will work towards minimalizing the size and
damage of any future data breaches at these locations, and protect
consumers from having their personal identification stolen after their
stay.

 
LEGISLATIVE HISTORY:

Senate

2021-2022 - S3187A, Referred to Consumer Protection

Assembly

2021-2022 - No Assembly Same-As

 
FISCAL IMPLICATIONS:

None to the state.

 
EFFECTIVE DATE:
This act shall take effect on the thirtieth day after it shall have
become law.