New York SHIELD Act

The New York State Stop Hacks and Improve Electronic Data Security Act ("SHIELD Act") is a significant amendment to the state’s data breach notification law and data protection requirements. New York has taken substantial steps toward strengthening the enforcement of consumer privacy and data protection. Violations of the SHIELD Act are considered to be deceptive acts or practices, subject to enforcement by the New York Attorney General. Businesses that fall within the scope of the SHIELD Act could face civil penalties of up to $5,000 dollars per violation.

If you collect, own, or license computerized data that includes private information about New York State residents, you are likely subject to the SHIELD Act and required to develop, implement, and maintain certain measures to protect that private information (i.e., employee and consumer data). The requirements of the SHIELD Act include the implementation of a cybersecurity program, workforce training, and incident response planning and testing.

Proofpoint products and services are valuable components of a robust cybersecurity program and offer administrative and technical safeguards such as identifying and preventing external and insider cyber risks and providing security awareness training for our customers’ workforces. As a cybersecurity company and a business subject to this act, Proofpoint is committed to protecting the private information entrusted to us. Proofpoint is ready to assist customers in meeting their own security needs and compliance goals. For more information about how Proofpoint protects our customers’ data, please see the Data Security Policy on the Proofpoint Trust site. We invite you to learn more about Proofpoint Security Awareness Training (PSAT) and our other products that can help you with your cybersecurity program and workforce training.