Remaining New York SHIELD Act Data Security Requirements Have Taken Effect

The New York SHIELD (“Stop Hacks and Improve Electronic Data Security”) Act has made a number of changes to the state's data breach notification law, including expanding the definitions of “private information” and “breach.” The definition of “private information” now covers emails and passwords or security questions and answers, credit card details, and biometric data among others.