Request your SHIELD Act IT assessment.

Is your auto or truck dealership compliant with the New York SHIELD Act?

The Stop Hacks and Improve Electronic Data Security (SHIELD) Act is a New York state law that increases the protection of personal information by enforcing changes to data management and security policies.

Any business that owns or licenses data containing private information of New York State residents must comply with the SHIELD Act, regardless of whether that business operates within New York. Businesses have until March 21, 2020 to get compliant with the law.

Complete the form and a Helion representative will contact you to schedule an assessment that will identify what your company needs to do to comply with the SHIELD Act.

Determining reasonable safeguards

According to the SHIELD Act, dealerships must “develop, implement and maintain reasonable safeguards” to protect consumer data. But what does “reasonable” mean?

Storage

Server and cloud security are part of SHIELD Act-compliant data management. Are your servers up to speed with best practices? Dealerships must:

Implement effective boundary defense
Securely configure hardware and software on all storage devices
Increase malware defenses

Monitoring

SHIELD Act compliance isn’t a one-time fix. In order to protect your network, you need to monitor for new threats. Dealerships will be required to:

Continuously manage vulnerabilities
Carefully control administrative access
Improve audit log processes

Network

Identifying and remediating security flaws and penetration risks is another key part of SHIELD Act. Dealerships are expected to:

Inventory and actively manage networked hardware and software
Securely configure network devices, such as firewalls and routers
Institute email and web browser protections