The NY SHIELD Act: What It Actually Requires of a 20-Person Business
New York’s SHIELD Act requires almost every business holding a New York resident’s personal data to run a written data security program. A company with around 20 employees still counts as a “small business” under the law, which lowers the bar to “reasonable” safeguards instead of a detailed checklist. This comes up constantly. An owner … Read more