NY attorney general proposes tougher data security law

(AP) -- New York's data security law is weak and should be overhauled to require businesses to protect the personal information of consumers and employees, the state's top law enforcement official said

News 12 Staff

Jan 15, 2015, 6:34 PM

Updated 3,468 days ago

Share:

(AP) -- New York's data security law is weak and should be overhauled to require businesses to protect the personal information of consumers and employees, the state's top law enforcement official said Wednesday.
New York Attorney General Eric Schneiderman said that in the event of a data breach or unauthorized disclosure, companies and employers are merely required to notify affected individuals if "private information" is compromised. That includes Social Security, driver's license and account or credit card numbers, but not email addresses and passwords, security questions, medical history and health insurance information.
Schneiderman proposed making employers and retailers responsible for protecting all that personal information, while giving them protection from liability if they meet certain security standards.
"With some of the largest-ever data breaches occurring in just the last year, it's long past time we updated our data security laws and expanded protections for consumers," Schneiderman said. "We must also remind ourselves that companies can be victims, and that those who take responsible steps to protect customers should be rewarded."
According to a July report from the attorney general's office, security breaches reported by businesses, nonprofits and governments in New York more than tripled between 2006 and 2013, exposing 22.8 million personal records of New Yorkers in nearly 5,000 incidents.
Deliberate hacking was responsible for 40 percent of the incidents, which exposed a majority of the records, followed by lost or stolen equipment, insider wrongdoing, and inadvertent errors, according to the report. The 7.3 million records exposed in 900 security breaches last year cost the public and private sectors an estimated $1.37 billion to investigate, rectify and help customers.
The proposed legislation would require entities that collect or store private information to have "reasonable" security measures, including administrative, technical and physical safeguards to assess risks from employees, computer networks and software. They would also have to have the means to detect, prevent and respond to attacks and protect the physical areas where information is stored. They would need independent third-party compliance audits and certifications annually.


More from News 12
3:24
FBI investigating Trump rally attack as potential act of domestic terrorism

FBI investigating Trump rally attack as potential act of domestic terrorism

1:44
HEAT ALERT: Hot and humid Monday in the Hudson Valley; feels-like temps near 100

HEAT ALERT: Hot and humid Monday in the Hudson Valley; feels-like temps near 100

5:30
In prime-time address, Biden warns of election-year rhetoric, saying ‘it’s time to cool it down’

In prime-time address, Biden warns of election-year rhetoric, saying ‘it’s time to cool it down’

1:54
Reps. Lawler, Torres to introduce bill enhancing Secret Service protection for presidential candidates

Reps. Lawler, Torres to introduce bill enhancing Secret Service protection for presidential candidates

2:07
A look back at US political violence that changed history

A look back at US political violence that changed history

2:31
Pace professor weighs political rhetoric, gun control in wake of Trump rally shooting

Pace professor weighs political rhetoric, gun control in wake of Trump rally shooting

4:10
EXCLUSIVE INTERVIEW: Trump rally attendee gives his eyewitness account of the shooting

EXCLUSIVE INTERVIEW: Trump rally attendee gives his eyewitness account of the shooting

2:37
Security increased at Trump Tower following rally shooting

Security increased at Trump Tower following rally shooting

1:59
Hudson Valley officials condemn violence following Trump rally shooting

Hudson Valley officials condemn violence following Trump rally shooting

2:27
Political analyst weighs in on gun violence in wake of Trump rally shooting

Political analyst weighs in on gun violence in wake of Trump rally shooting

1:29
Expert: Security will be a high level concern at presidential events in wake of Trump rally shooting

Expert: Security will be a high level concern at presidential events in wake of Trump rally shooting

1:40
Chappaqua reacts to assassination attempt on former President Trump

Chappaqua reacts to assassination attempt on former President Trump

1:34
Political analyst: Shooting at Trump rally will bring changes to 2024 Presidential Election

Political analyst: Shooting at Trump rally will bring changes to 2024 Presidential Election

2:03
Poll: More than 40% of women skip or delay medical screenings and appointments

Poll: More than 40% of women skip or delay medical screenings and appointments

0:36
New Rochelle PD: Teen killed in fiery car crash at Golden Horseshoe Shopping Center

New Rochelle PD: Teen killed in fiery car crash at Golden Horseshoe Shopping Center

1:54
Overnight fire closes Delite Bake Shop in Yonkers

Overnight fire closes Delite Bake Shop in Yonkers

2:23
‘New York’s backyard jam.’ Music lovers flock to Pleasantville Music Festival

‘New York’s backyard jam.’ Music lovers flock to Pleasantville Music Festival

1:55
NYPD: 3-year-old fatally struck in Harlem was from New Rochelle

NYPD: 3-year-old fatally struck in Harlem was from New Rochelle

0:30
Wake services held for Port Chester police officer killed in an off-duty motorbike crash

Wake services held for Port Chester police officer killed in an off-duty motorbike crash

0:25
Police: Newburgh man faces prison time for menacing Maybrook residents with gun

Police: Newburgh man faces prison time for menacing Maybrook residents with gun