Assembly Bill A913

2025-2026 Legislative Session

Relates to when and how notification of a data breach is to be provided to the department of financial services

download bill text pdf

Sponsored By

Current Bill Status - In Assembly Committee

  • Introduced
    • In Committee Assembly
    • In Committee Senate
    • On Floor Calendar Assembly
    • On Floor Calendar Senate
    • Passed Assembly
    • Passed Senate
  • Delivered to Governor
  • Signed By Governor

Do you support this bill?

Please enter your contact information

Home address is used to determine the senate district in which you reside. Your support or opposition to this bill is then shared immediately with the senator who represents you.

Optional services from the NY State Senate:

Create an account. An account allows you to officially support or oppose key legislation, sign petitions with a single click, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.

Include a custom message for your Senator? (Optional)

Enter a message to your senator. Many New Yorkers use this to share the reasoning behind their support or opposition to the bill. Others might share a personal anecdote about how the bill would affect them or people they care about.
Actions

2025-A913 (ACTIVE) - Details

See Senate Version of this Bill:
S804
Current Committee:
Assembly Consumer Affairs And Protection
Law Section:
General Business Law
Laws Affected:
Amd §899-aa, Gen Bus L (as proposed in S.2659-B & A.8872-A)

2025-A913 (ACTIVE) - Summary

Relates to when and how notification of a data breach is to be provided to the department of financial services.

2025-A913 (ACTIVE) - Bill Text download pdf 

                             
                     S T A T E   O F   N E W   Y O R K
 ________________________________________________________________________
 
                                    913
 
                        2025-2026 Regular Sessions
 
                           I N  A S S E M B L Y
 
                                (PREFILED)
 
                              January 8, 2025
                                ___________
 
 Introduced by M. of A. SAYEGH -- read once and referred to the Committee
   on Consumer Affairs and Protection
 
 AN  ACT  to  amend the general business law, in relation to when and how
   notification of a data breach is to be provided to the  department  of
   financial services

   THE  PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND ASSEM-
 BLY, DO ENACT AS FOLLOWS:
 
   Section 1. Paragraph (a) of subdivision 8 of  section  899-aa  of  the
 general business law, as amended by a chapter of the laws of 2024 amend-
 ing  the general business law relating to notification of a data breach,
 as proposed in legislative bills numbers S. 2659-B and A.    8872-A,  is
 amended to read as follows:
   (a)  In  the event that any New York residents are to be notified, the
 person or business shall notify the state attorney general, the  depart-
 ment  of  state,  the  division  of  state police, and the department of
 financial services as to the timing, content  and  distribution  of  the
 notices  and  approximate number of affected persons and shall provide a
 copy of the template of the notice sent to affected  persons;  PROVIDED,
 HOWEVER,  THAT NOTICE TO THE DEPARTMENT OF FINANCIAL SERVICES SHALL ONLY
 BE REQUIRED IF THE PERSON OR BUSINESS IS A COVERED ENTITY, AS DEFINED IN
 23 NYCRR 500.1, AND PROVIDED FURTHER THAT SUCH NOTICE SHALL BE  PROVIDED
 TO  THE  DEPARTMENT  OF  FINANCIAL  SERVICES IN COMPLIANCE WITH 23 NYCRR
 500.17. Such notice shall be made without delaying  notice  to  affected
 New York residents.
   §  2.  This  act  shall  take  effect on the same date and in the same
 manner as a chapter of the laws of 2024 amending  the  general  business
 law  relating  to notification of a data breach, as proposed in legisla-
 tive bills numbers S. 2659-B and A. 8872-A, takes effect.

  EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                       [ ] is old law to be omitted.
                                                            LBD02809-01-5

Comments

Open Legislation is a forum for New York State legislation. All comments are subject to review and community moderation is encouraged.

Comments deemed off-topic, commercial, campaign-related, self-promotional; or that contain profanity, hate or toxic speech; or that link to sites outside of the nysenate.gov domain are not permitted, and will not be published. Attempts to intimidate and silence contributors or deliberately deceive the public, including excessive or extraneous posting/posts, or coordinated activity, are prohibited and may result in the temporary or permanent banning of the user. Comment moderation is generally performed Monday through Friday. By contributing or voting you agree to the Terms of Participation and verify you are over 13.

Create an account. An account allows you to sign petitions with a single click, officially support or oppose key legislation, and follow issues, committees, and bills that matter to you. When you create an account, you agree to this platform's terms of participation.