On November 1, 2023, the New York Department of Financial Services (NYDFS) issued the finalized revisions, referred to as the “Second Amendment”, to title 23 of the New York Codes, Rules and Regulations (NYCRR) part 500. These changes represent the most noteworthy modifications to this NYCRR part since its initial enactment in 2017, which first brought cybersecurity requirements to the attention of NYDFS-regulated entities.
Referred to colloquially as “Part 500”, these regulations form a significant component of New York’s overall approach to maintaining the safety and integrity of the vast financial services industry in the state. The Second Amendment represents a heightened emphasis on the critical nature of cybersecurity in a steadily digitalizing global financial marketplace.
Navigating the specifics of the NYDFS amendments and understanding their potential implications is a crucial task for legal professionals operating within NYDFS-regulated organizations. It is vital that these professionals understand the potential implications well enough to advise their organizations on compliance effectively.
For a more detailed review of the finalized amendments to cybersecurity regulations, you may wish to read the full article provided by WilmerHale.