Isaacson Discusses NY’s Cyber Breach Notification Law with Newsday

Debbie Isaacson was interviewed for the Newsday article, “Data breaches near historic high,” which talks about the near-record number of data breaches in 2022. The breaches were driven, in large part, by attacks on supply chains.

Debbie noted that New York’s SHIELD Act, which became law in 2019, requires a person or business to notify any New York resident if their “private information was or is reasonably believed to have been accessed or acquired by a person without valid authorization.” The Act also requires a “description of categories of the information that were or are reasonably believed to have been accessed or acquired, including specifics as to elements of personal and private information,” she said. Finally, Debbie said that the SHIELD Act requires that business that use third-party vendors adopt reasonable administrative safeguards, including making sure the vendor they select is capable of maintaining appropriate cybersecurity protections.