NY SHIELD Act · Compliance readiness
If you hold a New York resident's data, the SHIELD Act applies to you. Most businesses find out after a breach.
The reasonable safeguards the Act requires, documented, and the breach process ready before it is needed.
How we workSame six steps, every project
- 1Issue
- 2Input
- 3Plan
- 4Solution
- 5Execution
- 6Happy client
Step 3 of 6: Plan
See the six steps for thisIn force since March 2020. If you hold private information about New York residents – and if you have customers or employees, you do – it applies to you, regardless of where your business sits.
What it actually asks for
Reasonable safeguards in three categories – administrative, technical and physical – for the private information you hold about New York residents, and a duty to notify when that information is breached. It scales with the size of the business: a small firm is expected to do what is reasonable for a small firm, not to run a bank’s security program.
What it does not give you is a checklist or a certificate. That is what makes it easy to ignore and awkward to be measured against after the fact. This is not legal advice; it is what the requirement looks like in practice.
What readiness looks like here
An inventory of what private information you hold and where. A written security program that names who is responsible. Access control and multi-factor authentication. Encryption on the devices that leave the building. A disposal process for old hardware. A breach-response procedure that has been walked through at least once. Each one evidenced, dated and reviewed annually – so the answer to “was it reasonable” is a folder, not a memory.
What is included
- Data inventory: what you hold, and where
- The written security program the Act expects
- Access control, encryption and disposal
- Staff training, with the records kept
- Breach-response procedure, rehearsed
- Annual review and re-attestation
Why clients stay
- 2004
- In business since
- 950+
- People we support
- 60 days
- Money-back guarantee
“After meeting Mariusz and discussing what our needs were with the budget we were looking to work with, a network system was designed and installed. When needed the Interactive AV-IT team has gone above and beyond the call of duty to resolve any issues.”
Ready to talk?
Book a fifteen-minute call, or tell us what you are dealing with and we will tell you what we would check first. No obligation.
Why businesses choose us
- One team for IT and AV – the network, the security, the phones and the boardroom.
- 24/7/365 monitoring, with a helpdesk that knows your office.
- A 60-day money-back guarantee for new managed clients.
- Based in Hauppauge, on site across Long Island and New York City since 2004 – and now in Boca Raton, FL.