The cybersecurity regulation (“CyberRegs”) adopted by the New York State Department of Financial Services (“NYDFS”) is almost two years old and will be fully in effect by March 2019. The CyberRegs has already had a broad impact on financial institutions that are authorized to engage in business in New York (“Covered Entities”). Furthermore, even for those financial services companies not directly covered, the CyberRegs has generally raised the expectations of other regulators and defined what are considered best practices for cybersecurity programs in the industry.
