I reported back in June that the New York State Senate was aiming to pass the ‘stop hacking and improve data (SHIELD)’ security act.

← Back to Blog

I reported back in June that the New York State Senate was aiming to pass the ‘stop hacking and improve data (SHIELD)’ security act. Well it looks like it passed the Senate and is now on its way to the New York assembly. (https://lnkd.in/eAxiyxV).

It will no doubt be dependent upon lobbying from all concerned and in my opinion it will be fought by many corporates. But with the state of cyber and information security, may stand a chance and not fall over at the last hurdle, like a predecessor in 2017.

The enclosed article is a good read. It breaks down some of the provisions of the act (as it is currently written). It differentiates itself in a number of ways from other data laws in the US like the CCPA. It will;
1. Give the rights of New Yorkers to sue companies directly over data violations.
2. Applies to companies of any size.
3. Businesses are to act as ‘Data Fiduciaries’. Legally baring businesses from using data in a way that benefits their companies to the detriment of their users.

If this act gets through it will create some interesting challenges for companies around information risk management. A time to dust of the ISO 27001 series.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6552860141413298176