In this New York Law Journal analysis, Mark Krotoski and Martin Hirschprung review the components of New York’s Stop Hacks and Improve Electronic Data Security Act, including the three major changes it establishes to the state’s 2005 Information Security Breach and Notification Act. The amendments reflect a recent trend to enact stricter data breach laws. For companies responding to data breach incidents, the amendments further add to the current patchwork of differing state standards.