On January 15, 2015, New York Attorney General Eric Schneiderman
announced that he would be proposing legislation to overhaul New
York's data security law and require new and unprecedented
safeguards for personal data of consumers. While the proposal has
yet to be released, the Attorney General's press release
indicates that the proposal will include a substantive standard for
preventing and responding to a data breach. In other words, the
proposal would require all entities that collect or store
information to take specific steps to ensure reasonable security
measures to protect information. If passed, New York will join a
select few number of states, including Maryland and Massachusetts,
which requires specific action to take to avoid and respond to a
data breach.
