New York Tightens the Breach Clock: 30 Days to Notify

New York Tightens the Breach Clock: 30 Days to Notify

Organizations handling New Yorkers’ data now face one of the country’s shortest breach notification deadlines. Morrison Foerster attorneys Melissa Crespo and Reiley Porter break down the state’s recent amendments that impose a 30-day notification requirement and expand protected information categories to include medical and health insurance data.  Recent amendments to New York General Business Law § 899-aa, New York’s data breach notification la…