Relates to when and how notification of a data breach is to be provided to the department of financial services

This bill (A 913) amends New York's data breach notification law to clarify when and how certain businesses must notify the Department of Financial Services (DFS) about breaches affecting New York residents. It requires covered entities (financial institutions regulated under 23 NYCRR 500.1) to provide DFS with details about breach notifications to consumers - such as timing, content, and the number of affected people - along with a copy of the consumer notice. This notification to DFS must be provided without delaying the business's direct notification to affected residents. The bill specifically applies only to financial entities under DFS oversight, not all businesses handling data breaches.