New York has enacted an information security breaches law, which will oblige firms and local government agencies to notify customers in the state if their personal information is taken, or its systems are hacked into. The legislation is designed to promote security.