New York amends data breach law


On December 24, New York Gov. Kathy Hochul (D) signed into law an amendment to section 899-aa of the N.Y. General Business Law, also known as The Shield Act, modifying the law’s data breach notification requirements.

The amendment, which took effect immediately, incorporates provisions that other states have adopted in recent years. First, the amendment shortens the timeline for notifying consumers about data breaches. Second, the amendment adds regulatory reporting requirements.

Read more…
Source: JD Supra News


Sign up for our Newsletter


Related:

  • US intel officials scramble to keep surveillance law running amid Iran war tensions

    April 13, 2026

    With just days until a powerful surveillance law lapses, US national security officials are scrambling to prepare for potential blind spots in intelligence collection amid the US’ delicate ceasefire with Iran, current and former officials told CNN. Some communications carriers that manage data for the surveillance program have privately warned the Trump administration they will cease ...

  • Suspect arrested after incendiary device thrown at OpenAI CEO Sam Altman’s home

    April 11, 2026

    A 20-year-old man has been arrested after a Molotov cocktail was thrown at the San Francisco home of OpenAI CEO Sam Altman early Friday morning. The incident happened around 4:00 am when a suspect “threw an incendiary destructive device” at Altman’s home, “causing a fire to one exterior gate” before fleeing on foot, according to statement ...

  • Thousands of official government email addresses, including plaintext passwords available online

    April 11, 2026

    The official email accounts of public officials all over the world have been leaked online, with many exposed alongside their plaintext passwords, making it trivial for an attacker to breach their accounts. Researchers at Proton scoured the darker side of the internet for the publicly available email addresses of government officials – and discovered thousands of ...

  • FBI Atlanta, Indonesian Authorities Take Down Global Phishing Network Behind Millions in Fraud Attempts

    April 10, 2026

    In a first-of-its-kind joint cyber investigation, the FBI Atlanta Field Office and Indonesian law enforcement authorities have dismantled a sophisticated global phishing operation that enabled cybercriminals to steal thousands of victims’ account credentials and attempt more than $20 million in fraud. The operation centered on the W3LL phishing kit, a widely used cybercrime tool that allowed ...

  • France to ditch Windows for Linux to reduce reliance on US tech

    April 10, 2026

    France is trying to move on from Microsoft Windows. The country said it plans to move some of its government computers currently running Windows to the open source operating system Linux to further reduce its reliance on U.S. technology. Linux is an open source operating system that is free to download and use, with various customized ...

  • Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

    April 6, 2026

    The financially motivated cybercriminal actor tracked by Microsoft Threat Intelligence as Storm-1175 operates high-velocity ransomware campaigns that weaponize N-days, targeting vulnerable, web-facing systems during the window between vulnerability disclosure and widespread patch adoption. Following successful exploitation, Storm-1175 rapidly moves from initial access to data exfiltration and deployment of Medusa ransomware, often within a few days and, ...