On the other hand, Attorney General Letitia James commented, “The SHIELD Act is now the law of the land and provides better protections for consumers’ private information. New Yorkers deserve the peace of mind that companies will be held accountable for securing their information.”
New York State’s SHIELD Act
The SHIELD Act strengthens the state’s current breach notification law. It broadens the scope of information cover under the notification law to include biometric information and email addresses with their corresponding passwords or security questions and answers.
Additionally, it expands the definition of data breach to include unauthorized access to private information and creates reasonable data security requirements based on the size of a business.
Furthermore, the SHIELD Act updates the notification requirements and procedures every company and state agency must follow when a data breach occurs.
Moreover, it extends the notification requirement to any person or entity with private information of a New York resident, not just those who conduct business in New York State.
