New York is the latest state to adopt a law that requires businesses that collect private information on its residents to implement reasonable cybersecurity safeguards to protect that information. New York now joins California, Massachusetts and Colorado in setting these standards. New York’s law mandates the implementation of a data security program, including measures such as risk assessments, workforce training and incident response planning and testing. Businesses should immediately begin the process to comply with the Act’s requirements effective March 21, 2020 ...
Recent Updates
- Menopause as a Protected Class: Growing Trend or a Hot Flash?
- The Second Circuit Joins Fellow Circuits in Extending Limitations on Mandatory Arbitration Agreements
- Updating Your First Aid Kit: What Employers Need to Know About Opioid Antagonist Requirements in New York
- New DOL Guidance Reiterates Key Priorities for MHPAEA Enforcement - Takeaways for Plan Sponsors
- Shh! Press the Button: New York State DOL Proposes Silent Response Button Rules for Retail Workplace Violence Prevention