Entities	New York (10)
Topics and Issues	Cybersecurity (7)

On November 1, 2023, DFS announced amendments to Cybersecurity Regulation, 23 NYCRR Part 500. (See the final adopted regulatory documents on the Regulatory Activity – Financial Services Law page.

Unlike in prior rounds where we did file comments, we did not do so in this current round as we did not find anything either (a) materially worth commenting on and/or (b) anything that was not “asked and answered.” The Department issued its Assessment of Public Comments (Oct. 2023). Also, Governor Hochul issued a press release.

DFS announced that it “will host a series of webinars to provide an overview of the amended Cybersecurity Regulation” “[t]o help regulated entities plan for compliance.” The Department also announced “key compliance dates.”

CDIA Resource Center: NY DFS Seeks to Amend its Cybersecurity Rules