ANALYSIS: Ten Takeaways on N.Y.’s New Breach, Data Security Law

Aug. 5, 2019, 10:41 AM

Businesses may view New York’s recently enacted “Stop Hacks and Improve Electronic Data Security Act” (2019 N.Y Laws ch. 117) as more of a burden than a shield, as it expands the compliance obligations for any company that owns or licenses private information of New York residents. To help companies identify what’s new, here’s a quick rundown of the key specs you need to know before reviewing your incident response plan and overall cyber-governance strategy.

1. Effective Dates

The SHIELD Act addresses two issues: It amends New York’s breach notification provisions, and it establishes new data security requirements. ...

To read the full article log in. To learn more about a subscription click here.