Cybersecurity Policy Report, N.Y. Lawmakers Eye Bill to Impose New Data Breach Notification Requirements, (May 15, 2026)
The New York state Senate Committee on Internet and Technology meets May 21 to consider a bill that would require prompt notification to affected individuals in the event of a data breach within certain state entities.
First introduced in 2025, SB 8169 would amend existing law to extend notification requirements in the event of a data breach to local municipalities that are “just as susceptible to these types of vulnerabilities and who are often charged with managing highly sensitive, confidential information for thousands of individuals.”
“With these adjustments, individuals will be made more fully aware of when their data may be compromised and given greater opportunity to take corrective action. At a time when cyberthreats are on the rise, particularly among local governments, this legislation will better protect those who rely on secure systems to keep their information safe,” said Sen. Siela Bynoe (D.), sponsor of the bill (S.B. 8169, Reg Sess.).
The Senate passed the measure in June 2025.
News: StateLegislation DataBreach DataPrivacy DataSecurity