New York SHIELD Act data-security guidance
The New York Attorney General's SHIELD Act guidance explains breach-notification expansion and reasonable administrative, technical, and physical safeguards for private information, including biometric and account-access data.
New York · Active · Implementation Jul 25, 2019
What it is
- What changed
- The Attorney General guidance says the SHIELD Act strengthened New York data-security law by expanding breach-notice private-information categories and requiring reasonable safeguards. The guidance lists administrative, technical, and physical safeguard examples and notes the law expanded private information to include biometric information and online-account credentials.
- Why it matters
- Caregiver-support tools often rely on accounts, remote workflows, and sensitive household context; the SHIELD Act guidance is a state source for baseline data-security expectations even when a tool is outside a hospital record system.
- Who it touches
- Family caregivers, People using AI and digital health tools, People receiving care, Businesses and agencies that must complyNew York residents, family caregivers, care recipients, digital health users, care technology vendors, privacy teams
- What it does
- Plans, studies, registries or guidance
Sources
Last reviewed Jul 4, 2026. This is information, not legal advice; check the source for the current text.