New York Attorney General Announces Proposal To Revamp State Data Security Laws

On January 15, 2015, New York Attorney General Eric Schneiderman indicated that he plans to propose legislation to update New York's information security laws, including by revising the definition of "private information" under the state's data security breach notification statute. Schneiderman's proposal comes on the heels of President Obama's January 13, 2015, unveiling of measures further to his 2011 Cybersecurity Legislative Proposal, including a plan to create a national data breach notification standard aimed at "simplifying and standardizing the existing patchwork of ... state laws ... into one federal statute."

Notably, Attorney General Schneiderman's proposed changes to New York's security breach notification law would expand the definition of "private information" to encompass: