A new law (the SHIELD Act) in New York state that will take effect March 21, 2020. The Bill was just signed by the New York Governor on July 25, 2019. It should be noted that he also signed into law (effective Sept. 2019), an Identity Theft Prevention law.
https://www.jacksonlewis.com/publication/new-york-enacts-shield-act-adding-data-security-requirement...
Similar to many other states in the US or the EU's GDPR, if you have personal data of an individual living in New York state on your books you are subject to this law.
d