What it requires
- Keep administrative, technical and physical safeguards for the private information the organisation holds.
- Tell the affected people within 30 days of finding a breach.
- Tell the attorney general, the department of state, the state police and the financial services department about the notices.
Who it applies to
Every organisation.
120,816 exempt organisations in the 22 counties.
IRS exempt list · 2 Oct 2026The project that meets it
Sources
NY SHIELD Act is in force.
David from SBK replies within one working day.