A planned bill would expand New York’s definition of the type of data stored at businesses whose breach would mandate a disclosure to include email addresses.
