Imposes a five-day time limit during which to disclose a breach in the security of a system

A 1157 (2025) requires businesses handling New York residents' personal data - such as names, Social Security numbers, or financial details - to notify affected individuals within five days of discovering a security breach, replacing a previous 30-day deadline. This applies to any breach involving "private information" stored in computerized systems. The law maintains existing exceptions for law enforcement investigations but shortens the disclosure window significantly. The bill amends New York's general business law to enforce this faster notification requirement.