
by Richard Ruzzo
On July 26, the Shield Act was signed into law by Gov. Andrew Cuomo to direct that better security measures and policies are put in place by all business that store, maintain or electronically handle non-public personal information (NPPI) to help protect against hackers obtaining an individual’s personal and private information.
The law is set to take effect March 21.
What determines a breach in a security system?
A breach occurs when one’s NPPI is exposed, made vulnerable or stolen from the host organization by unscrupulous data thieves. The information at risk and covered by the new statue is as follows:
Any data that is compromised and consisting of any combination of; name, Social Security number, driver’s license number or non-driver identification card, account number, credit card number, security access code, password or PIN to a financial account, username/email address with a security question/password and any biometric data information based on unique features that can be viewed digitally.