BILL NUMBER: S804
SPONSOR: COMRIE
 
TITLE OF BILL:
An act to amend the general business law, in relation to when and how
notification of a data breach is to be provided to the department of
financial services
 
PURPOSE:
This is a chapter amendment to L.2024, c.647, to ensure entities report
data breaches to the appropriate agency.
 
SUMMARY OF PROVISIONS:
This legislation amends the underlying chapter by clarifying that only
entities under the jurisdiction of the Department of Financial Services
(DFS) need provide notice to DFS of data breaches.
 
EXISTING LAW:
None.
 
JUSTIFICATION:
This legislation is a negotiated change to the underlying chapter.
 
LEGISLATIVE HISTORY:
Chapter amendment to Chapter 647 of the Laws of 2024. 5.2659-B and
A.8872-A both passed the Senate and Assembly, respectfully, in June
2024.
 
FISCAL IMPLICATIONS:
None
 
EFFECTIVE DATE:
This act shall take effect on the same date and in the same manner as a
chapter of the laws of 2024 amending the general business law, in
relation to when and how notification of a data breach is to be provided
to the department of financial services, as proposed in legislative
bills numbers S.2659-B and A.8872-A, takes effect.