New York is the latest state to adopt a law that requires businesses that collect private information on its residents to implement reasonable cybersecurity safeguards to protect that information. New York now joins California, Massachusetts and Colorado in setting these standards. New York’s law mandates the implementation of a data security program, including measures such as risk assessments, workforce training and incident response planning and testing. Businesses should immediately begin the process to comply with the Act’s requirements effective March 21, 2020 ...
Blog Editors
Recent Updates
- Watch: Words Matter - How to Draft Arbitration Agreements That Hold Up in Court - Employment Law This Week
- One Nation, One Privacy Law: GOP Introduces Federal Privacy Legislation
- DOL Proposes New Safe Harbor for Selection of Designated Investment Alternatives for Defined Contribution Plans
- Watch: Joint Employment, Misclassification, I-9s, and Web Accessibility - New Rules and Rulings Reshape Employer Risk - Employment Law This Week
- Critical Infrastructure at Risk: Project Glasswing Urges Attention to AI-Driven Cyber-Risks