The Bottom Line Companies that own or license New Yorkers’ private information must develop a data security program that is compliant with the SHIELD Act. The program should be documented in a written information security policy and other policies that are drafted specifically to reflect the Continue Reading