As the prevalence of data breaches continues to rise, the need for robust cybersecurity measures has never been more urgent. In response to this growing threat, the New York Department of Financial Services (NYDFS) has recently updated its cybersecurity regulations. The finalized draft of these changes, which were enacted following a year of public consultation, was released on November 1. The updated regulations are potentially significant not only for entities licensed in New York, but also herald a potential shift in the industry as other sectors might follow suit.
This is the topic of discussion on a recent episode of The Consumer Finance Podcast, where Troutman Pepper Partner Chris Willis talked with Troutman Pepper Privacy + Cyber Partner Kim Phan about these crucial updates. Phan, in the podcast, provides useful background information about the legislation, and discusses some potential implications for the sector.
The NYDFS has notably ramped up its expectations regarding data management for licensed entities, a move which may predicate broader industry changes. For such entities, demonstrating regulatory adherence is not only necessary for maintaining licensure, but also plays a critical role in managing risk and establishing reputation among customers and investors.
While it remains to be seen how much the NYDFS’s new measures will impact the larger regulatory climate in the short term, it’s clear that data security and effective digital risk management continue to be key issues on the global stage. The recent NYDFS updates will be something that all legal professionals, particularly those specializing in cyber law and finance, should keep a close eye on in the coming year.