In late December 2024, the New York governor signed two bills (S2659B and S2376B) amending the state’s data breach notification law to expand the definition of “reportable personal information” and ...