Many states have recently updated their data privacy laws to reflect new security threats and technological advancements. A New York legislation governing notification procedures for data breaches went into effect on October 23, 2019. The Stop Hacks and Improve Electronic Data Security Act (SHIELD Act), which now covers businesses with operations in all 50 states, has a wider scope than the state’s prior data breach notification act.

The SHIELD Act may be applicable if a company owns or has a