SHIELD Act Becomes Law, Expanding Breach Notification and Data Security Requirements

Doing business with residents of NY State? Time to update your breach notification procedures…:

[…] The SHIELD Act updates the breach notification requirements so that they apply to all individuals or businesses who own or license private information of a New York resident, not just to those that “conduct business” in New York State and expands the current law’s definitions of “private information” and “breach.” These changes have far reaching implications to persons or businesses who own or license private information of New Yorkers and significantly lowers the threshold of what is considered a breach that triggers a disclosure to affected persons.

[…]

Read the original article here