Skip to main content

AgoraSign in

Leroy Comrie

Sponsor · State Senator, District 14 · Democratic

Follow

Senate bill · S2152 (2025-26)

Relates to identity theft prevention and mitigation services in the case of a security breach

Latest action Jan 7, 2026

Summary

Requires certain businesses to offer identity theft prevention and mitigation services in the case of a security breach; exempts businesses under financial hardship.

Your position on this bill

Not chosen yet

Sign in to choose

Where it stands

Out of committee and scheduled for a vote by the full chamber.

  1. Introduced
  2. In committee
  3. Up for a vote
  4. Passed one chamber
  5. Passed
  6. Enacted

New York State Senate

Same as A1374, the matching bill in the Assembly.

Amends the General Business Law.

Committee

Consumer Affairs and Protection · New York State Assembly

Also referred to Internet And Technology · New York State Senate.

Purpose, from the sponsor's memo

This bill would require any person or business to provide free reason- able credit report monitoring, identity theft prevention services, and if applicable, identity theft mitigation services should they suffer a data breach including a consumer's social security number.

Filed with the bill. Read it on nysenate.gov (opens in a new tab)

Recorded votes

  • Vote: Committee vote · Internet And Technology

    Senate Internet And TechnologyFeb 10, 2025Result: passed

    (5) (2) (0) (0)

The sponsor's argument

Why Leroy Comrie says this is needed

Data and security breaches are an all too common occurrence in the modern age. Such breaches occur among many large corporations such as Yahoo, Marriott, EBay, Target and JP Morgan. The theft of personal data, including Social Security Numbers puts consumers at inordinate risk for dire financial consequences, such as having their identity stolen and their credit totally ruined. This legislation would require any person or business to provide free reasonable credit report monitoring, identity theft prevention services, and if applicable, identity theft mitigation services should they suffer a data breach including a consumer's social security number. These services would be required to be provided to affected consumers for a minimum of two years. Additionally such person or business would be required to provide notice to a consumer whose social security number was disclosed onò how to obtain such services free of charge. The bill also provides that any person or small business may apply to the Depart- ment of Financial Services for a financial hardship waiver if they are able to demonstrate to the Department that these requirements would impose a financial hardship.

This is the sponsor's own case for the bill, quoted from their memorandum. It is not Agora's description of what the bill does.

Full history

  1. Jan 7, 2026

    Referred to committee

    REFERRED TO CONSUMER AFFAIRS AND PROTECTION

    NY Assembly

  2. Jan 7, 2026

    Referred to committee

    REFERRED TO INTERNET AND TECHNOLOGY

    NY Senate

  3. Feb 10, 2025

    Reported out of committee

    REPORTED AND COMMITTED TO CONSUMER PROTECTION

    NY Senate

  4. Jan 15, 2025

    Referred to committee

    REFERRED TO INTERNET AND TECHNOLOGY

    NY Senate

  5. Jan 9, 2025

    Referred to committee

    REFERRED TO CONSUMER AFFAIRS AND PROTECTION

    NY Assembly

About this record

Summary

The summary comes from NY Open Legislation, the New York State Senate's public record. For more, see How we handle summaries.

Cosponsors

The list shows the cosponsors who are on Agora, A to Z. The official record may list more.

Party colors

Parties are shown in the same neutral colors.

Source

From NY Open Legislation, the NY Senate and Assembly, and official rosters. This record was last updated Oct 31, 2026. About our data

Read the record

Follow