Directs consumer credit reporting agencies to automatically freeze consumer credit reports which are subject to data breaches; further allows a consumer to unfreeze accounts which have been automatically frozen at no cost to the consumer.
STATE OF NEW YORK
________________________________________________________________________
6879
2017-2018 Regular Sessions
IN SENATE
September 20, 2017
___________
Introduced by Sen. COMRIE -- read twice and ordered printed, and when
printed to be committed to the Committee on Rules
AN ACT to amend the general business law, in relation to automatic secu-
rity freezes on consumer credit reports
The People of the State of New York, represented in Senate and Assem-bly, do enact as follows:
1 Section 1. Section 380-t of the general business law is amended by
2 adding a new subdivision (c-1) to read as follows:
3 (c-1)(1) Any consumer credit reporting agency which receives notifica-
4 tion that it has experienced a breach of data shall, within seven days
5 of discovery of the data breach, automatically place a security freeze
6 on each consumer's credit report who was affected by the breach of data
7 for no longer than ninety days. Such consumer credit reporting agency
8 shall further notify a consumer of such security freeze placed on his or
9 her credit report within seven days of the placement of the freeze.
10 (2) If, after an automatic security freeze has been placed on a
11 consumer's credit report in accordance with this subdivision, a consumer
12 wishes to allow his or her consumer credit report to be accessed for a
13 specific party or a specific period of time while a freeze is in place,
14 the consumer shall unfreeze his or her consumer credit report in accord-
15 ance with subdivision (d) of this section, at no cost to the consumer.
16 § 2. This act shall take effect immediately.
EXPLANATION--Matter in italics (underscored) is new; matter in brackets
[] is old law to be omitted.
LBD13522-01-7
