personal information protection

Personal information protection refers to laws and rules that govern how organizations collect, use, store, share, and dispose of data that can identify an individual (such as names, contact details, IDs, or online identifiers). It focuses on requiring consent and transparency, limiting use to legitimate purposes, and safeguarding the data against unauthorized access or breaches.

New York SHIELD Act data breach law overview

The New York SHIELD Act – A Model for Every State’s Next Data Breach Law

Business Data Protection, Consumer Rights and Privacy Protection, Cybersecurity Law and Compliance, Data Privacy and Security, State Legislation and Regulation / Jack Gilbert

New York’s SHIELD Act took full effect on March 21, 2020 and requires businesses to implement “reasonable” data security safeguards and notify affected New York residents of certain breaches. It broadened what counts as private information and expanded coverage to many out-of-state companies handling NY data. This article explains the law’s key requirements and why […]

The New York SHIELD Act – A Model for Every State’s Next Data Breach Law Read More »

What is invasion of privacy?

Invasion of privacy is a legal violation that generally falls into 4 categories: intrusion, public disclosure of private facts, false light, and appropriation of name/likeness. It occurs when someone unlawfully intrudes on your seclusion, publicizes private information, or exploits your identity without consent. This article explains each type, common examples, and legal options for victims.