News & Analysis as of

Data Privacy Data Breach New York

Moore & Van Allen PLLC

New York Businesses Must Now Disclose Data Breaches of “Medical Information” Under New Law

Moore & Van Allen PLLC on

On February 14, 2025, New York’s Governor Hochul signed into law A.B. 920, which amended the state’s Information Security Breach and Notification Act to add personal health information to the types of data that constitute...more

Alston & Bird

Consumer Finance State Roundup - March 2025

Alston & Bird on

The latest edition of the Consumer Finance State Roundup highlights recently enacted measures of potential interest from two states: California: Effective January 1, California Assembly Bill 3108 addresses mortgage fraud. ...more

Faegre Drinker Biddle & Reath LLP

Lessons from PayPal’s $2 Million Cybersecurity Settlement with the New York State Department of Financial Services

On January 23, 2025, PayPal settled an enforcement action brought by the New York State Department of Financial Services (NY DFS) for failing to comply with cybersecurity regulations required for financial services businesses...more

Alston & Bird

New York Amends Data Breach Notification Law with Immediate Implications

Alston & Bird on

In late December 2024, the New York Governor signed two bills (S2659B and S2376B) amending the state’s data breach notification law (N.Y. Gen. Bus. Law § 899-aa), to expand the definition of reportable personal information...more

Mayer Brown

New York Gives Businesses a Package of Six New Consumer Data Protection Laws to Unwrap During the Holiday Season

Mayer Brown on

On December 21, 2024, while many Americans were busy signing holiday cards and exchanging gifts, New York Governor Kathy Hochul was signing six significant pieces of legislation aimed at enhancing online safety and...more

Sheppard Mullin Richter & Hampton LLP

New York AG Settles EnforcemENT Action with ENT

The New York Attorney General’s Office recently settled with Albany ENT & Allergy Services over claims that the healthcare provider failed to protect over 200,000 consumers’ private health information. The claims stem from...more

Jones Day

New York Imposes Stringent Cybersecurity and Cyber Incident Reporting Obligations on Hospitals

Jones Day on

New York recently passed new cybersecurity regulations for hospitals licensed in New York to enhance patient safety and cybersecurity....more

Constangy, Brooks, Smith & Prophete, LLP

Good news for businesses: NYS courts will dismiss data breach class actions for lack of concrete harm to plaintiff

Data breaches have become a serious issue for businesses, leading to numerous putative class action lawsuits alleging that the defendants failed to prevent the unauthorized disclosure of personally identifiable information or...more

EDRM - Electronic Discovery Reference Model

[Webinar] “Reasonable” Cyber Best Practices: Sword or Shield? - April 24th, 1:00 pm - 2:00 pm ET

In an era where digital information flows ceaselessly, the specter of data breaches looms large. Whether these breaches are the result of deliberate attacks or unintentional leaks, they can range from being merely...more

Robinson+Cole Data Privacy + Security Insider

NYAG Settles with Healthplex for $400,000

On December 8, 2023, New York Attorney General Leticia James penned her approval to an Assurance of Discontinuance with third party dental administrator Healthplex, settling the enforcement action for $400,000 and a litany of...more

Wyrick Robbins Yates & Ponton LLP

Empire State of Security: New York DFS Finalizes Significant Amendment to Financial Services Cybersecurity Regulation

The New York State Department of Financial Services (“NYDFS”), which regulates financial services institutions including banks, insurance companies, and mortgage brokers, finalized an amendment to its Cybersecurity Regulation...more

Jackson Lewis P.C.

New York AG Remains Active On The Data Security Enforcement Front

Jackson Lewis P.C. on

In yet another example of its focus on imposing greater data security accountability, the New York Attorney General (“NYAG”) recently announced a significant settlement with Marymount Manhattan College (“the College”). The...more

Sheppard Mullin Richter & Hampton LLP

Graduation Goods Settlement: A Good Reminder of AGs’ Data Security Priorities

The New York and Pennsylvania AGs settlement with Herff Jones from late last year provides guidance to businesses about expected security measures as we enter into 2023. The case arose after Herff Jones, producer and seller...more

Sheppard Mullin Richter & Hampton LLP

Wegmans Settles With NYAG for $400,000 Over Data Incident

The New York Attorney General recently announced a data security-related settlement with Wegmans Food Markets. The issue arose in April 2021 regarding a cloud-based incident. At that time a security researcher notified...more

Sheppard Mullin Richter & Hampton LLP

NYAG Issues Credential Stuffing Guidance

The New York AG recently issued information about steps companies can take to protect against credential stuffing attacks, and how to handle them if they occur. The guidance makes up a majority of a larger AG report on...more

Lowenstein Sandler LLP

Emerging From COVID-19: Data Privacy and Security in a Changed World

Lowenstein Sandler LLP on

As millions have moved their professional and personal lives online, in-person contact during the COVID-19 pandemic has become a memory except for “essential” public services. To receive medical care or an education, be...more

16 Results
 / 
View per page
Page: of 1

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide