Statute
SHIELD Act
62 published works
Data Protection Report
New York Attorney General, personal data, and SHIELD Act
By Steve Roosa (US), Susan Ross (US)
On March 20, 2025, the New York Attorney General (“NYAG”) announced a settlement with Ohio-based Root Insurance, regarding privacy practices relating to its auto insurance online quoting tool. As part…
Data Protection Report
Violation of HIPAA Security Rule = Violation of NY SHIELD Act
By David Kessler (US), Susan Ross (US), Susana Medeiros (US)
On August 13, 2024, the New York Attorney General announced a settlement agreement, along with the Attorneys General of Connecticut and New Jersey, with Enzo Biochem Inc. and its subsidiary…
Inside Privacy
U.S. Senate Passes SHIELD Act to Criminalize Distribution of Private Intimate Images Online
By Nicholas Xenakis, Diana Lee
On July 10, 2024, the U.S. Senate passed the Stopping Harmful Image Exploitation and Limiting Distribution (“SHIELD”) Act, which would criminalize the distribution of private sexually explicit or nude images…
Global Policy Watch
U.S. Senate Passes SHIELD Act to Criminalize Distribution of Private Intimate Images Online
By Nicholas Xenakis, Diana Lee
On July 10, 2024, the U.S. Senate passed the Stopping Harmful Image Exploitation and Limiting Distribution (“SHIELD”) Act, which would criminalize the distribution of private sexually explicit or nude images…
Data Protection Report
More New York SHIELD Act guidance
By David Kessler (US), Susan Ross (US)
On June 20, 2022, the New York Attorney General (NYAG) announced a consent agreement (called an Assurance of Discontinuance) with Northeast grocery chain Wegmans for, among other things, violations of…
Workplace Privacy, Data Management & Security Report
$600,000 Reasons To Review Your SHIELD Act Compliance Program: NY Attorney General Announces Significant Settlement Stemming From Email Data Breach
By Damon W. Silver, Gregory C. Brown Jr.
On January 24, 2022, New York Attorney General Letitia James announced a $600,000 settlement agreement with EyeMed Vision Care, a vision benefits company, stemming from a 2020 data breach compromising…
The Global Privacy Watch
New York Attorney General’s Office’s Recent EyeMed Investigation Highlights Need to Meet Expanded Data Privacy Standards of New York’s SHIELD Act
By Matthew Catalano, Daphne Morduchowitz, Claire Bjerke
Earlier this month, the New York Attorney General’s Office issued findings of its investigation into a data security incident involving EyeMed Vision Care LLC (“EyeMed”) as well as the agreement…
Levy Employment Law Blog
Even Small Employers Have Data Protection Requirements Under the NYS “Shield” Act
By Tracey Levy
By Alexandra Lapes New York employers responding to the pandemic may have overlooked data privacy requirements that took full effect in March 2020 as part of the Stop Hacks and…
Byte Back
New York’s Investigation of Dunkin Donuts Results in a Promise to Abide by the SHIELD Act’s Requirements
By Erik Dullea
Key Point: The New York Attorney General’s Office (NYAG) reached a Consent and Stipulation Agreement with Dunkin’ Brands, Inc. (Dunkin), which obligates the company to implement and maintain a comprehensive…
Workforce Bulletin
New York Could Become the First State to Require Cybersecurity CLE
By Brian G. Cesaratto, Shawndra G. Jones
New York attorneys could soon have to complete cybersecurity training courses to satisfy their continuing legal education (“CLE”) requirement. The House of Delegates of the New York State Bar Association…