New York - Breach Notification
This playbook helps an analyst determine if the breached data meets the criteria for breach notification according to New York State law, and, if necessary, follows through with the notification procedures. DISCLAIMER: Please consult with your legal team before implementing this playbook. **Sources:** https://ag.ny.gov/internet/data-breach https://www.dos.ny.gov/consumerprotection/pdf/infosecbreach03.pdf https://www.nysenate.gov/legislation/laws/GBS/899-AA
- Pack
- BreachNotification-US
- Tasks
- 38
Inputs
- ContactName — In case of a breach, the contact details to send to the Attorney General and the affected residents.
- ContactEmailAddress — In case of a breach, the contact details to send to the Attorney General and the affected residents.
- ContactTelNumber — In case of a breach, the contact details to send to the Attorney General and the affected residents.
- CompanyName
- CompanyAddress — In case of a breach, the company details to display in the breach report.
- CompanyCity — In case of a breach, the company details to display in the breach report.
- CompanyCountry — In case of a breach, the company details to display in the breach report.
Outputs
- PIICompromised — Set a flag indicating that PII has been compromised.
- HealthInsuranceBreached — Set a flag indicating that the breach contains PII of health insurance information.
- MedicalInformationBreached — Set a flag indicating that the breach contains PII of medical information.
- FinancialInformationBreached — Set a flag indicating that the breach contains PII of financial information.
- AccountInformationBreached — Set a flag indicating that the breach contains PII of account information.
- UniqueIdentificationNumberBreached — Set a flag indicating that the breach contains PII of unique identification number.
- UniqueBiometricDataBreached — Set a flag indicating that the breach contains PII of unique biometric data.
- Analyst review.Answers.1 — Explain, in your words, the incident origin, what you have checked, and any information related to this incident.
Commands used
- send-mail
- setIncident