Jon Campbell reports in Politics on the Hudson that Attorney General Eric Schneiderman is preparing new legislation that would mandate companies notify consumers if their email address and password information or health care information was breached. Currently, companies in New York are only required to notify consumers if their credit card, bank account, social security number, or drivers license number is given up in a data breach. “With some of the largest-ever data breaches occurring in just the last year, it’s long past time we updated our data security laws and expanded protections for consumers,” Schneiderman said in a statement Jan. 15. “We must also remind ourselves that companies can be victims, and that those who take responsible steps to safeguard customer data deserve recognition and protection.” According to Schneiderman, there were 5,000 data breaches in New York between 2006 and 2013. Read the full story in Politics on the Hudson.