
New York Data Privacy Laws: SHIELD Act & Consumer Rights (2026)
Guide to New York data privacy laws including the SHIELD Act, breach notification rules, biometric protections, employee monitoring law, and pending NY Privacy Act.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
11269 articles
Browse by Category →
Guide to New York data privacy laws including the SHIELD Act, breach notification rules, biometric protections, employee monitoring law, and pending NY Privacy Act.

Learn about West Virginia data privacy laws including breach notification requirements, identity theft penalties, credit freeze rights, and pending consumer data protection legislation.

Guide to Ohio data privacy laws including the Data Protection Act safe harbor, breach notification requirements under ORC 1349.19, and consumer protections.

Nebraska Data Privacy Act (LB 1074) took effect January 1, 2025. Learn consumer rights, business obligations, penalties up to $7,500, and data breach notification rules.

Oklahoma enacted the Consumer Data Privacy Act (SB 546) on March 20, 2026, effective Jan. 1, 2027. Learn breach notification rules, AG enforcement, and federal overlay.

Guide to Pennsylvania data privacy laws including breach notification under BPINA, the all-party consent Wiretap Act, pending HB 78 consumer privacy bill, and AG enforcement.

North Dakota data privacy laws: breach notification under N.D. Cent. Code Ch. 51-30, HB 1127 financial data security, identity theft protections, and federal TAKE IT DOWN Act coverage as of May 2026.

Learn about Washington data privacy laws including the My Health My Data Act, biometric privacy protections, and breach notification rules under state law.

Vermont data privacy laws explained: first-in-the-nation data broker registry, 45-day breach notification rules, student privacy protections, and consumer rights.

DC has no comprehensive privacy law yet. D.C. Code §§ 28-3851 to 28-3853 require breach notification; the AG enforces via CPPA. Federal overlay includes the TAKE IT DOWN Act (FTC enforcement live May 2026).

New Mexico's Data Breach Notification Act (NMSA 57-12C) requires 45-day notice. In March 2026, a jury ordered Meta to pay $375M under the Unfair Practices Act.

South Dakota requires 60-day breach notification under SDCL 22-40-19. No comprehensive privacy law yet. Learn about penalties, consumer rights, and 2026 legislative updates.