Overview: 23 NYCRR 500

Quick Definition

23 NYCRR 500 requires banks, insurance companies, and other financial services institutions regulated by the New York Department of Financial Services (NYDFS or simply DFS) to establish and maintain a cybersecurity program designed to both protect consumers and to ensure the safety of New York State’s financial services industry.