Large, high profile data breaches involving consumer information have been part of the news cycle for a decade and more.  Everything from the world’s largest companies to government agencies and local businesses have been victims of hacks, employee misconduct, and accidental disclosures.  Legislatures are responding.  The SHIELD Act is New York’s latest response.

In 2005, New York passed the Information Security Breach and Notification Act.  The SHIELD Act amends the 2005 law, modernizing and expanding upon it.  The SHIELD Act takes effect in two parts.  The first part, concerning data breach notification, takes effect October 23, 2019, and the second part, concerning data security,...