After a year of high-profile data breaches nationally, New York's Information Security Breach and Notification Act took effect Dec. 7, requiring consumer notification in the event that certain types of private data are breached.
The law states that private information includes Social Security number, driver's license number, non-driver identification card number and debit/credit account number. It does not include publicly available data such as name, address or telephone number.
The breach notices are to be written or electronic.
The law resembles the California data breach notification law that resulted in the ChoicePoint data breach becoming public knowledge early this year. After notifying California residents, the company then decided to send notifications nationwide, as have several other firms that suffered data breaches this year.
Several federal data breach and identity theft bills are working their way through Congress, and one is likely to pass next year.
Kristen Bremner covers list news, insert media, privacy and fundraising for DM News and DMNews.com. To keep up with the latest developments in these areas, subscribe to our daily and weekly e-mail newsletters by visiting www.dmnews.com/newsletters