9/26/05-A new law that takes effect in December is intended to head off identity thieves.
The “Information Security Breach and Notification Act” requires all companies in New York that keep information that could be used in identity theft to notify people affected by any breaches in security.
The new law, previously A4254, covers any business, state agency, organization or person who kept computerized information identifying people’s driver’s license numbers, Social Security numbers or credit card numbers. It requires a person to be contacted if their account information also includes passwords or other information enabling a thief to access the accounts.
Failure to notify people that their personal or financial information had been compromised would be a $5,000 fine or $10 per person, whichever amount is greater.
The new law covers businesses and organizations of any size and the personal information doesn’t need to be that of customers. Members of an organization or employees whose information was breached would also have to be notified.

8/15/05-A bill before Gov. George Pataki is intended to head off identity thieves.
The “Information Security Breach and Notification Act” would require all companies in New York that keep information that could be used in identity theft to notify people affected by any breaches in security.
Sponsored by Assemblyman Jim Brennan, D-Brooklyn, A4254 would cover any business, state agency, organization or person who kept computerized information identifying people’s driver’s license numbers, Social Security numbers or credit card numbers. It would require a person to be contacted if their account information also includes passwords or other information enabling a thief to access the accounts.
Failure to notify people that their personal or financial information had been compromised would be a $5,000 fine or $10 per person, whichever amount is greater.
The bill would cover businesses and organizations of any size and the personal information doesn’t need to be that of customers. Members of an organization or employees whose information was breached would also have to be notified.
A4254 unanimously passed the Assembly and Senate. If signed by the governor, it would take effect in four months.
For bill status, call (518) 455-7545. In New York, call 1-800-342-9860.