Thank you for sharing!

Your article was successfully shared with the contacts you provided.

There’s never a dull moment in privacy compliance. New York’s SHIELD Act officially went into effect on March 21, but while many companies may have greeted the deadline from a position of strength, some could be finding themselves in a much more uncertain enforcement landscape than the one they imagined when the law was passed in July 2019.

The SHIELD Act amends New York’s existing data breach notification law, expanding the definition of a breach to include not only unauthorized acquisition of protected digital information, but unauthorized access as well. It also broadens the type of information that companies have to protect to include “private information”—like Social Security or driver’s license numbers—as well as “personal information” or “any information concerning a natural person” that can be used to identify said natural person.

Mark Krotoski, a partner at Morgan Lewis, indicated that the firm was already seeing “substantial compliance” with the tenants of the SHIELD Act among organizations. The General Data Protection Regulation or the California Consumer Privacy Act may deserve most of the credit, having long since forced many businesses to take a thorough data and cybersecurity inventory.

This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.

To view this content, please continue to their sites.

Not a Lexis Advance® Subscriber?
Subscribe Now

Not a Bloomberg Law Subscriber?
Subscribe Now

Why am I seeing this?

LexisNexis® and Bloomberg Law are third party online distributors of the broad collection of current and archived versions of ALM's legal news publications. LexisNexis® and Bloomberg Law customers are able to access and use ALM's content, including content from the National Law Journal, The American Lawyer, Legaltech News, The New York Law Journal, and Corporate Counsel, as well as other sources of legal information.

For questions call 1-877-256-2472 or contact us at [email protected]

Frank Ready

Frank Ready is a reporter on the tech desk at ALM Media. He can be reached at [email protected]

More from this author

Privacy LawBook

Privacy Law thoroughly explains the legal obligations and potential liability of those who work with and share private information.

Get More Information

ALM Legal Publication Newsletters

Sign Up Today and Never Miss Another Story.

As part of your digital membership, you can sign up for an unlimited number of a wide range of complimentary newsletters. Visit your My Account page to make your selections. Get the timely legal news and critical analysis you cannot afford to miss. Tailored just for you. In your inbox. Every day.

Copyright © 2021 ALM Media Properties, LLC. All Rights Reserved.