This program will provide an overview of the recently enacted New York SHIELD Act, which applies to any entity that possesses the personally identifiable information of a New York resident and requires such entities to implement reasonable administrative safeguards to protect such information from data breaches and cyberattacks. The program will explain the new statutes specific requirements including those concerning risk identification, assessment of existing controls, and vendor agreements governing personally identifiable information. The program will also address how attorneys can best advise clients seeking to establish compliant information security safeguards and assist clients in proactively preventing cybersecurity incidents that could create exposure under the New York SHIELD Act and other state, federal, and international laws.