Cybersecurity Policy Report, New York Bill Would Expand Data Breach Notification Requirements, (May 19, 2025)
A recently offered bill in the New York state Senate would require prompt notification to affected individuals in the event of a data breach within certain state entities.
SB 8169 would amend existing law to extend notification requirements in the event of a data breach to local municipalities that are “just as susceptible to these types of vulnerabilities and who are often charged with managing highly sensitive, confidential information for thousands of individuals.”
“With these adjustments, individuals will be made more fully aware of when their data may be compromised and given greater opportunity to take corrective action. At a time when cyberthreats are on the rise, particularly among local governments, this legislation will better protect those who rely on secure systems to keep their information safe,” said Sen. Siela Bynoe (D., District 6), sponsor of the bill (S.B. 8169, Reg Sess.).
The bill has been referred to the Senate Committee on Internet and Technology.
News: StateLegislation DataBreach