Ask Reggi Your Question Now
Can you summarize S 05575?
Senate Bills > Relates to a notification of a security breach [SAME AS A05635-B]
Short Summary
The Stop Hacks and Improve Electronic Data Security Act (SHIELD Act) amends the general business law and the state technology law in relation to notification of a security breach. It applies to any person or business that owns or licenses computerized data containing private information. The act requires the disclosure of any breach of the security system to affected New York residents in a timely manner. There are exemptions for inadvertent disclosures by authorized persons if it is determined that no harm is likely to result. The act also imposes civil penalties for violations, with a maximum penalty of $20 per instance of failed notification, not exceeding $250,000 in total.
Whom does it apply to?
Any person or business that owns or licenses computerized data which includes private information
What does it govern?
Notification of a security breach
What are exemptions?
Exposure of private information due to inadvertent disclosure by authorized persons, if it is determined that such exposure will not likely result in misuse or harm to affected persons
What are the Penalties?
Civil penalties of up to $20 per instance of failed notification, not exceeding $250,000 in total
Jurisdiction
New York