STATE PRIVACY NOTICE OVERLAYS - NEW YORK
NEW YORK (NY SHIELD ACT)
- No comprehensive state consumer privacy law; focus on data security and breach notification.
- Disclose security measures at a high level and provide a privacy contact for requests.
- If applicable, include NYDFS cybersecurity disclosures for regulated financial institutions.
UNIVERSAL IMPLEMENTATION NOTES
- Maintain reasonable safeguards for New York private information.
- Update incident response materials to align with New York breach notification rules.
- Track retention schedules; minimize sensitive data.
[// GUIDANCE: If handling children's data (under 16/13), layer on COPPA/child-consent rules and under-18 sensitive treatment where applicable. If selling/sharing, maintain a sales/sharing register and contract restrictions.]