5 Considerations for General Counsels Regarding the New York Cybersecurity Regulations

By Lawrence R. Hamilton, Jeffrey P. Taft & Matthew Bisanz on October 9, 2018

Posted in Breaches & Incident Response, Cybersecurity, Financial Services, United States, US State Laws

The cybersecurity regulation (“CyberRegs”) adopted by the New York State Department of Financial Services (“NYDFS”) is almost two years old and will be fully in effect by March 2019. The CyberRegs has already had a broad impact on financial institutions that are authorized to engage in business in New York (“Covered Entities”). Furthermore, even for those financial services companies not directly covered, the CyberRegs has generally raised the expectations of other regulators and defined what are considered best practices for cybersecurity programs in the industry.