On October 23, 2019, New York state’s Stop Hacks and Improve Electronic Data Security (SHIELD) Act went into effect. The law broadens the state’s existing breach notification laws and imposes new security obligations for companies doing business in New York, including an expanded focus on how companies handle biometric data. The SHIELD Act also applies