{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/us-breach-notification",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/us-breach-notification)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-31",
    "fingerprint": "ewai:eu:a87b91",
    "proof": "sha256:4d7f8154c7cc7212a38f3a3524903802f8e93f0f4bef10b14179895907c25061",
    "jurisdiction": "eu"
  },
  "brand_source": "Source: NovaCopilot",
  "cagi_brand": "CAGI – Corporate Artificial General Intelligence",
  "cagi_version": "1.0",
  "cagi_relation": "alternate-entry",
  "canonical_agent": "/us/agent/us-breach-notification",
  "jurisdiction": "US NY",
  "agent_type": "deterministic",
  "cagi_entry": "https://legal.exploreworldai.com/us/ny/cagi-api/us-breach-notification",
  "canonical_agent_url": "https://legal.exploreworldai.com/us/agent/us-breach-notification",
  "id": "us-breach-notification",
  "identifier": "N.Y. Gen. Bus. Law §§ 899-aa and 899-bb",
  "matched": null,
  "verdict": "tillåtet",
  "audit": "UTANFÖR_TILLÄMPNING",
  "verdict_kind": "machine-classification",
  "outcome": {
    "code": "out-of-scope",
    "verdict": "tillåtet",
    "audit": "UTANFÖR_TILLÄMPNING",
    "title": "Regeln ger inget krav på den indata som lämnats",
    "titleEn": "The rule yields no requirement for the facts supplied",
    "obligation": "Inget intrång i uppgifter om boende i New York eller i hälsoinformation är angivet. Övriga 48 delstater har egna anmälningslagar som inte prövas här.",
    "obligationEn": "No breach of New York resident data or health information is stated. The other 48 states have their own notification laws that are not tested here.",
    "refs": []
  },
  "trace": [
    {
      "ruleId": "br-hipaa-500",
      "matched": false,
      "checks": [
        {
          "expr": "intrang = true",
          "value": false
        },
        {
          "expr": "halsouppgifter = true",
          "value": false
        },
        {
          "expr": "antal_berorda >= 500",
          "value": false
        }
      ]
    },
    {
      "ruleId": "br-ny",
      "matched": false,
      "checks": [
        {
          "expr": "intrang = true",
          "value": false
        },
        {
          "expr": "boende_new_york = true",
          "value": false
        }
      ]
    },
    {
      "ruleId": "br-hipaa",
      "matched": false,
      "checks": [
        {
          "expr": "intrang = true",
          "value": false
        },
        {
          "expr": "halsouppgifter = true",
          "value": false
        }
      ]
    }
  ],
  "missing": [
    "antal_berorda",
    "boende_new_york",
    "halsouppgifter",
    "intrang"
  ],
  "facts": {},
  "run_hash": "sha256:fd0473f6d7c7dd2f2bee4e66ce8ffa707affe678cde4d55616e37b783f7c435e",
  "coverage_score": 29,
  "change_impact_score": 5,
  "sources": [
    {
      "identifier": "N.Y. Gen. Bus. Law §§ 899-aa and 899-bb",
      "title": "Reasonable safeguards",
      "reference": "N.Y. Gen. Bus. Law § 899-bb(2)",
      "scope": "Administrative, technical and physical safeguards, with a named security coordinator and vendor selection duties.",
      "officialUrl": "https://www.nysenate.gov/legislation/laws/GBS/899-BB"
    },
    {
      "identifier": "N.Y. Gen. Bus. Law §§ 899-aa and 899-bb",
      "title": "Small business standard",
      "reference": "N.Y. Gen. Bus. Law § 899-bb(2)(c)",
      "scope": "Safeguards proportionate to size, complexity and the sensitivity of the data held.",
      "officialUrl": "https://www.nysenate.gov/legislation/laws/GBS/899-BB"
    },
    {
      "identifier": "N.Y. Gen. Bus. Law §§ 899-aa and 899-bb",
      "title": "Breach notification",
      "reference": "N.Y. Gen. Bus. Law § 899-aa",
      "scope": "Notice to affected residents and to the state authorities, including for unauthorised access without acquisition.",
      "officialUrl": "https://www.nysenate.gov/legislation/laws/GBS/899-BB"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Administrative safeguards",
      "reference": "45 CFR 164.308",
      "scope": "Risk analysis, workforce access, training and incident procedures.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Physical safeguards",
      "reference": "45 CFR 164.310",
      "scope": "Facility access, workstation use and media handling.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Technical safeguards",
      "reference": "45 CFR 164.312",
      "scope": "Access control, audit controls, integrity and transmission security.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    },
    {
      "identifier": "45 CFR Part 164, Subpart C",
      "title": "Business associate contracts",
      "reference": "45 CFR 164.314",
      "scope": "Written terms with every party that handles the data on your behalf.",
      "officialUrl": "https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-C"
    }
  ],
  "hashes": {
    "metadata": "sha256:253e3f431a8fc27f8eb3df751f795905f0c9c5ca36c18c966212718263bee875",
    "text": "sha256:3e465fceb45646b87b91a86bf7d8b149c1e3d97c6a43b1b45f088b040afccb6f",
    "script": "sha256:bbbd2536455b78ea7f90a7db3b2335ff6b718554d2357aee028c294c1a8fd775",
    "engine": "sha256:0a4bd50d21f8ec9be383fc091511008b76ad61909cbfb674eab56fe567fbd7a0",
    "agent": "sha256:31739960bd4fe85689ff70090024aa5ce3c1391be13d54ebe9bee04446a3cb4b"
  },
  "official_source": "https://www.nysenate.gov/legislation/laws/GBS/899-BB",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "citation": "N.Y. Gen. Bus. Law §§ 899-aa and 899-bb, Breach notification, Anmälan av dataintrång. NovaCopilot, https://legal.exploreworldai.com/us/agent/us-breach-notification (hämtad 2026-08-15, bevis sha256:6197e7583c04494a, bygge legal-2026-10-31).",
  "hash": "sha256:4d7f8154c7cc7212a38f3a3524903802f8e93f0f4bef10b14179895907c25061",
  "version": "legal-2026-10-31",
  "expires": "2026-11-02T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-31+legal-2026-10-31+2026-10-31T21:18:26",
    "content_hash": "sha256:4d7f8154c7cc7212a38f3a3524903802f8e93f0f4bef10b14179895907c25061",
    "revalidate_after": "2026-11-01T08:48:34.850Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/us/agent/us-breach-notification",
  "content_notice": {
    "legal_advice": false,
    "nature": "Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.",
    "kinds": {
      "official_text": "Officiell källtext, ordagrann och ej tolkad",
      "summary": "Sammanfattning, ej juristgranskad. Läs alltid källtexten",
      "classification": "Automatisk märkning ur källans egen text, ej juristgranskad"
    },
    "rule": "Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}