§ 6-85 Data Breach Notification Penalty Schedule.
RCNY § 6-85
All citations are to Title 20 of the Administrative Code of the City of New York or Title 6 of the Rules of the City of New York. Unless otherwise specified, the penalties set forth for each section of law or rule shall also apply to all subdivisions, paragraphs, subparagraphs, clauses, items, or any other provision contained therein. Each subdivision, paragraph, subparagraph, clause, item, or other provision charged in the Notice of Violation shall constitute a separate violation of the law or rule. Unless otherwise specified by law, a second, or third and subsequent violation means a violation by the same respondent, whether by pleading guilty, being found guilty in a decision, or entering into a settlement agreement for violating the same provision of law or rule, within two years of the prior violation(s). Each failure to comply gives rise to a separate violation of § 20-117 of the Administrative Code. Citation Violation DescriptionFirst ViolationFirstDefaultSecond ViolationSecond DefaultThird and Subsequent ViolationThird and Subsequent DefaultAdmin. Code§ 20-117Failure to promptly provide DCWP with data breach notification.$175$175$300$300$500$500 (Added City Record 6/6/2023, eff. 7/6/2023)
