New York passed a bill amending breach of security notification timing requirements. Under the bill, notice of a breach of security must be provided to affected New York residents no later than 30 days after the breach has been discovered (unless delayed due to the legitimate needs of law enforcement). The bill also requires a person that maintains personal information to provide notice of a security breach to the owner of the personal information no later than 30 days after the breach has been discovered. In addition, the bill requires a person to provide notice of a security breach to the Department of Financial Services in the event notice of a security breach must be provided to any New York residents. The bill went into effect December 24, 2024.
Click to view the NY SB 2659: https://www.tenaco.com/wp-content/uploads/2025/01/NY-SB-2659-12-24-24.pdf
