Search form

New York Employers Now Required To Advise Employees of Information Technology Security Breaches

By Susan M. Corcoran and Richard I. Greenberg
  • September 14, 2005

To provide employees with protection from identity theft in the workplace, numerous state legislatures have enacted legislation requiring employers to notify employees of any breach of security protocols for private information contained in an employer's computer systems.  In August 2005, the New York State Legislature amended The New York General Business Law to impose such an obligation on New York employers, effective on or about December 9, 2005.

With a limited exception for an ongoing criminal investigation, any person or business which maintains "private information" on a computer system must notify the "owner or licensee" of such information of any system breach immediately following discovery. The statute provides alternatives for providing notice, however, under all alternatives notice must be given in a manner to ensure that it reaches each affected individual.   While "private information" does not include publicly available information, it does include social security numbers, drivers' license or non-drivers' identification numbers, and financial account numbers.  Thus, almost every human resources information system maintained by a New York employer contains "private information."

To comply with this legislation, if a New York employer believes that an unauthorized employee or third party has breached the security of a computer system containing any "private information" (such as social security numbers), the employer must immediately notify all affected employees of the breach.   New York employers can no longer take a "wait and see" position as they investigate the scope of any potential breach.  Failure to provide prompt notice can result in injunctive relief, liability for actual losses suffered by an employee who did not receive notice, and if a court finds an employer knowingly or recklessly failed to provide notice, a civil penalty of up to $150,000.

For more information about the new law, or other matters pertaining to employer obligations with regard to employee information, please contact the Jackson Lewis attorney with whom you regularly work, or partners Susan M. Corcoran, (914) 328-0404,; or Richard I. Greenberg, (212) 545-4000,

©2005 Jackson Lewis P.C. This material is provided for informational purposes only. It is not intended to constitute legal advice nor does it create a client-lawyer relationship between Jackson Lewis and any recipient. Recipients should consult with counsel before taking any actions based on the information contained within this material. This material may be considered attorney advertising in some jurisdictions. Prior results do not guarantee a similar outcome.

Reproduction of this material in whole or in part is prohibited without the express prior written consent of Jackson Lewis P.C., a law firm that built its reputation on providing workplace law representation to management. Founded in 1958, the firm has grown to more than 900 attorneys in major cities nationwide serving clients across a wide range of practices and industries including government relations, healthcare and sports law. More information about Jackson Lewis can be found at

See AllRelated Articles You May Like

May 17, 2019

The EPL Insurance Advisor – May 2019

May 17, 2019

To assist underwriters and claims professionals in assessing emerging employment risks, we are pleased to provide the first issue of our newsletter. The EPL Insurance Advisor highlights topical issues in claims, defenses, and liability risk management developments. 2019 EPLI Trends Report – What Analysts and Underwriters Should... Read More

May 15, 2019

Does Massachusetts Non-Compete Law Restrict Access to Federal Court or Arbitration?

May 15, 2019

The Massachusetts Noncompetition Agreement Act (Non-Compete Act) has yet to be tested, but its venue provision likely will come under special scrutiny. The venue provision governs the geographical location and forum in which a non-compete lawsuit may be maintained. Due to its apparent conflicts with federal law, the venue provision will... Read More

January 7, 2019

2019: The Year Ahead for Employers

January 7, 2019

Over the past year, state and local governments responded in a variety of ways to national policy, and the midterm elections painted a picture of what’s in store for employers in 2019 and beyond. Jackson Lewis’ annual report outlines upcoming issues, trends, legislation and regulations employers need to be aware of in the coming year... Read More