A11127 • 2025

Relates to credit monitoring services

Active

The official status still shows this bill as active or still awaiting another formal step.

Sponsor: Clyde Vanel
Last action: 2026-04-24
Official status: In Assembly Committee
Effective date: Not listed

Plain English Breakdown

Using official source text because the generated explanation was unavailable or could not be confirmed against the official bill text.

Relates to credit monitoring services

Relates to credit monitoring services Provides that if the person or business providing the notification was the source of the breach, an offer to provide appropriate identity theft prevention and mitigation services, shall be provided at no cost to the affected person for not less than 12 months, along with all information necessary to take advantage of the offer to any person whose information was or may have been breached if the breach exposed or may have exposed personal information.

What This Bill Does

Relates to credit monitoring services Provides that if the person or business providing the notification was the source of the breach, an offer to provide appropriate identity theft prevention and mitigation services, shall be provided at no cost to the affected person for not less than 12 months, along with all information necessary to take advantage of the offer to any person whose information was or may have been breached if the breach exposed or may have exposed personal information.

Limits and Unknowns

This entry is temporarily using official source text because the generated explanation could not be confirmed against the official bill text during the last sync.

Bill History

2026-04-24 Assembly
REFERRED TO CONSUMER AFFAIRS AND PROTECTION

Official Summary Text

Relates to credit monitoring services
Provides that if the person or business providing the notification was the source of the breach, an offer to provide appropriate identity theft prevention and mitigation services, shall be provided at no cost to the affected person for not less than 12 months, along with all information necessary to take advantage of the offer to any person whose information was or may have been breached if the breach exposed or may have exposed personal information.

Current Bill Text

Read the full stored bill text

S T A T E   O F   N E W   Y O R K
        ________________________________________________________________________

                                          11127

                                  I N  A S S E M B L Y

                                     April 24, 2026
                                       ___________

        Introduced  by M. of A. VANEL -- read once and referred to the Committee
          on Consumer Affairs and Protection

        AN ACT to amend the general business law, in relation to credit monitor-
          ing services

          THE PEOPLE OF THE STATE OF NEW YORK, REPRESENTED IN SENATE AND  ASSEM-
        BLY, DO ENACT AS FOLLOWS:

     1    Section  1.  Subdivision  7  of section 899-aa of the general business
     2  law, as amended by chapter 117 of the laws of 2019, is amended  to  read
     3  as follows:
     4    7.  Regardless  of the method by which notice is provided, such notice
     5  shall include contact information for the person or business making  the
     6  notification,  the  telephone numbers and websites of the relevant state
     7  and federal agencies that provide information regarding security  breach
     8  response and identity theft prevention and protection information, and a
     9  description  of  the categories of information that were, or are reason-
    10  ably believed to have been, accessed or acquired  by  a  person  without
    11  valid authorization, including specification of which of the elements of
    12  personal  information  and  private  information were, or are reasonably
    13  believed to have been, so accessed or acquired. IF THE PERSON  OR  BUSI-
    14  NESS  PROVIDING  THE NOTIFICATION WAS THE SOURCE OF THE BREACH, AN OFFER
    15  TO  PROVIDE  APPROPRIATE  IDENTITY  THEFT  PREVENTION   AND   MITIGATION
    16  SERVICES,  SHALL  BE  PROVIDED AT NO COST TO THE AFFECTED PERSON FOR NOT
    17  LESS THAN TWELVE MONTHS, ALONG WITH ALL INFORMATION  NECESSARY  TO  TAKE
    18  ADVANTAGE  OF  THE OFFER TO ANY PERSON WHOSE INFORMATION WAS OR MAY HAVE
    19  BEEN BREACHED IF THE BREACH EXPOSED OR MAY HAVE EXPOSED PERSONAL  INFOR-
    20  MATION AS DEFINED IN SUBDIVISION ONE OF THIS SECTION.
    21    § 2. This act shall take effect immediately.



         EXPLANATION--Matter in ITALICS (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD05151-01-5