Entities	New York (10)
Topics and Issues	Cybersecurity (7)

In June 25, 2018, the New York Department of Financial Services (NYDFS) issued a final regulation requiring certain consumer credit reporting agencies (CCRAs) to register with the NYDFS and comply with the department’s cybersecurity regulation. Under the Regulation, CCRAs that reported on 1,000 or more New York consumers in the preceding year are subject to the rule. In a statement, at that time from Governor Andrew Cuomo, said that “[o]versight of credit reporting agencies ensures that the personal private information of New Yorkers is less vulnerable to the threat of cyber attacks, providing them with peace of mind about their financial future.”

In November 2017, CDIA filed an extensive comment to DFS on its October 2017 proposed rulemaking on Registration Requirements and Prohibited Practices for Credit Reporting Agencies.