New York
Regulation overview
Mandated Timeframe for Breach Reporting and/or Consumer Notification
Without unreasonable delayViolations of breach and notification laws:
- up to $250,000
Statutes and Laws
NY Gen. Bus. Law § 899-aa Notification; person without valid authorization has acquired private information
NY Gen. Bus. Law § 899-bb Data Security Protections (EFFECTIVE MARCH 21, 2020)
NY Gen. Bus. Law §§ 899-aaa – 899-bbb Document destruction contractors
NY Gen. Bus. Law § 399-ddd Confidentiality of social security account number
NY Gen. Bus. Laws § 399-ddd*2 Disclosure of social security number
NY Gen. Bus. Law § 399-h Disposal of records containing personal identifying information
23 NYCRR 500 §§ 500.00 – 500.23 Cybersecurity Requirements for Financial Services Companies