New York AB-4254 is a state data privacy law which protects personally identifiable information. New York AB-4254 was signed into law August 10, 2005 and became effective December 8, 2005. The law applies to any person or business which conducts business in New York and owns or licenses unencrypted computerized data that includes personally identifiable information.

The policy looks for at least one match to personally identifiable information, which may include:

Credit Card Number

Credit Card Track Data

US Drivers License Number

US Social Security Number