$1$ point possible $($graded$)$

According to General Business Law $899-$aa in the Doritex Corp. case, when should a

company notify affected individuals and various government agencies of a data breach?

In the most expedient time possible

Within $7$ days of the breach

Within $5$ business days of the breach

Within $30$ days of the breach

At the end of the financial year