Source: https://www.ecode360.com/8555690
Timestamp: 2019-04-26 10:12:28
Document Index: 516000122

Matched Legal Cases: ['§ 28', '§ 28', '§ 28', '§ 28', '§ 28', '§ 28', '§ 28', '§ 28', '§ 28', '§ 208']

Town of Malta, NY Notification of Information Security Breaches
§ 28-2 Notification required.
§ 28-4 Applicability to encrypted data.
§ 28-5 Delay of notification.
§ 28-6 Method of notification.
§ 28-7 Notification of CSCIC.
§ 28-8 Notification of Attorney General and Consumer Protection Board.
§ 28-9 Contents of notice.
§ 28-10 Applicability to third-party information.
§ 28-11 Notification of consumer reporting agencies.
Chapter 28 Notification of Information Security Breaches
[HISTORY: Adopted by the Town Board of the Town of Malta 3-6-2006 by Res. No. 94-2006. Amendments noted where applicable.]
This policy is consistent with the State Technology Law, § 208 as added by Chapters 442 and 491 of the Laws of 2005. This policy requires notification to impacted New York residents and nonresidents. New York State and the Town of Malta value the protection of private information of individuals. The Town of Malta ("Town") is required to notify an individual when there has been or is reasonably believed to have been a compromise of the individual's private information in compliance with the Information Security Breach and Notification Act and this policy.
The Town, after consulting with the Town's computer consultant and the Office of Cyber Security and Critical Infrastructure Coordination ("CSCIC") to determine the scope of the breach and restoration measures, shall notify an individual when it has been determined that there has been, or is reasonably believed to have been, a compromiser of private information through unauthorized disclosure.
Electronic notice, provided that the person to whom notice is required has expressly consented to receiving said notice in electronic form and a log of each such notification is kept by the Town that notifies affected persons in such form;
Telephone notification, provided that a log of each such notification is kept by the Town that notifies affected persons; or
Substitute notice, if the Town demonstrates to the State Attorney General that the cost of providing notice would exceed $250,000, or that the affected class of subject persons to be notified exceeds 500,000, or the Town does not have sufficient contact information. Substitute notice shall consist of all of the following:
Conspicuous posting of the notice on the Town's web site page, if the Town maintains one; and
The Town shall notify the Attorney General and the Consumer Protection Board, whenever notification to a New York resident is necessary, as to the timing, content and distribution of the notices and approximate number of affected persons.
Regardless of the method by which notice is provided, such notice shall include contact information for the Town making the notification and a description of the categories of information that were, or are reasonably believed to have been, acquired by a person without valid authorization, including specification of which of the elements of personal information and private information were, or are reasonably believed to have been, so acquired.