What Are The Best Practices for Compliance with The SHIELD Act

What Are The Best Practices for Compliance with the SHIELD Act

• Many states have recently updated their data privacy laws to reflect new security threats and technological advancements. A New York legislation governing notification procedures for data breaches went into effect on October 23, 2019. The Stop Hacks and Improve Electronic Data Security Act (SHIELD Act), which now covers businesses with operations in all 50 states, has a wider scope than the state’s prior data breach notification act.

Conduct routine

data checks:

Organizations must conduct routine audits to make sure they are aware of any data they may hold on New York residents. To stay organised and help with compliance efforts, it would be very beneficial to maintain a separate spreadsheet that details the different types of data that could potentially be covered by the SHIELD Act.

Update Necessary Procedures and Policies:

Companies who maintain the personal information of New Yorkers on their systems should immediately assess and revise their breach notification procedures in light of the new regulation. The SHIELD Act’s application and exclusion dates, as well as any special notice procedures, should be specified in updated policies.

Educate and train your workforce:

Businesses should always make sure their staff members are aware of the laws that apply to their daily operations. To acquaint staff with the SHIELD Act New York and ensure they are ready in the event of a breach, policies should be circulated, informational meeting and training sessions should be held.