Ready for the New York SHIELD Act?

ronjor · Dec 30, 2019

Scott Ferguson (@Ferguson_Writes) December 30, 2019

While California's Consumer Privacy Act has gotten the lion's share of headlines over the past several months when it comes to state privacy laws, enterprises should also pay close attention to New York's Stop Hacks and Improve Electronic Data Security (SHIELD) Act, which is bound to have far-reaching implications for CISOs from Wall Street to Upstate.
Click to expand...

guest · Feb 8, 2020

New York Cybersecurity Upgrades: Are You Ready?
February 5, 2020
https://www.natlawreview.com/article/new-york-cybersecurity-upgrades-are-you-ready

This spring, New York’s cybersecurity landscape shifts dramatically as certain provisions of New York’s Stop Hacks and Improve Electronic Data Security Act (“SHIELD Act”) take effect.
The SHIELD Act, 2019 N.Y. Ch. 117, which was signed into law by Governor Cuomo on July 25, 2019, modifies existing data breach law to expand the definition of “Private Information” and imposes new substantive cybersecurity requirements.

This post provides an overview of the cybersecurity requirements of the SHIELD Act in light of its looming compliance deadline, excluding modifications to the New York breach statute that have already taken effect. It also discusses the NY Department of Financial Services Cybersecurity Regulation to the extent it relates to the SHIELD Act.
Click to expand...

guest · Mar 11, 2020

NY SHIELD Act Data Security Requirements Effective This Month
March 9, 2020
https://www.eyeonprivacy.com/2020/03/ny-shield-act-data-security/

Businesses collecting personal information from New York residents will soon be expected to apply enhanced data security requirements.
The New York SHIELD Act, signed into law in July 2019, expanded breach notice requirements in October 2019. Now, On March 21, 2020, the remaining provisions related to data security will also come into effect. As we wrote previously, businesses subject to the law must implement data security programs that include at least the following:
[...]
There are some limited exceptions. Organizations otherwise regulated by federal law such as GLBA and HIPAA are exempt. There is also an exception for small businesses of fewer than 50 employees, [...]
Click to expand...

guest · Mar 18, 2020

SHIELD Act: New York businesses have less than a week to get their data security policies in order
March 18, 2020
https://portswigger.net/daily-swig/...-to-get-their-data-security-policies-in-order

Businesses in New York will soon be required to adhere to heightened data security measures when a new law is enacted in the state later this week.

The Stop Hacks and Improve Electronic Data Security Act, better known as the SHIELD Act, is a two-part data security focused bill impacting all businesses that handle information belonging to New York state residents.
The law, which is due to come into force on Saturday (March 21), will require businesses to “implement and maintain reasonable safeguards” in order to “protect the security, confidentiality, and integrity of private information”, the bill (PDF) states.
Steps towards compliance
To remain relevant to the diversity of organizations that face compliance, the security measures set out in the SHIELD Act are vague. Nonetheless, many companies may soon have to change their entire work structure in order to integrate security into every stage of their operations.
Click to expand...

guest · Mar 23, 2020

New York SHIELD Act’s Reasonable Safeguard Requirements Became Effective on March 21st —Is Your Company Ready?
March 21, 2020
https://www.insideprivacy.com/data-...ffective-on-march-21st-is-your-company-ready/

On March 21, 2020, the data security requirements of the New York SHIELD Act became effective. The Act, which amends New York’s General Business Law, represents an expansion of New York’s existing cybersecurity and data breach notification laws. Its two main impacts on businesses are:

expanding data breach notification requirements under New York law; and

requiring businesses to maintain “reasonable safeguards” to protect the “private information” of New York residents.

Click to expand...

Log in or Sign up

Ready for the New York SHIELD Act?

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Ready for the New York SHIELD Act?

ronjor Global Moderator

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches