New York SHIELD Act
The SHIELD Act sets data-security and breach-notification duties for anyone holding New York residents' private information. With no comprehensive consumer-privacy statute as of our last review, we design for reasonable safeguards: encryption, access controls, logging and a tested breach plan.