Hunton Privacy

JULY 1, 2022

On June 24, 2022, the New York State Department of Financial Services (“NYDFS” or the “Department”) announced it had entered into a $5 million settlement with Carnival Corp. Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Data Protection Report

NOVEMBER 2, 2023

On November 1, 2023, the New York Department of Financial Services (NYDFS) finalized the second amendment to its cybersecurity regulations, which are available here. a)), this new term applies. a)(2) to “update the superintendent with material changes or new information previously unavailable.”

Cybersecurity 104

Cybersecurity Compliance Financial Services Government 104

Hunton Privacy

JANUARY 3, 2017

On December 28, 2016, the New York State Department of Financial Services (“DFS”) announced an updated version of its cybersecurity regulation for financial institutions (the “Updated Regulation”). The Updated Regulation will become effective on March 1, 2017.

Cybersecurity 40

Cybersecurity Financial Services Authentication Information Security 40

Hunton Privacy

MAY 12, 2023

On May 5, 2023, New York Attorney General Letitia James released proposed legislation that seeks to regulate all facets of the cryptocurrency industry. The bill includes a broad set of measures intended to regulate comprehensively the entire cryptocurrency ecosystem.

Cybersecurity 116

Cybersecurity Manufacturing Data Privacy Compliance 116

HL Chronicle of Data Protection

FEBRUARY 25, 2020

Companies should take note of two imminent developments in New York in the area of cybersecurity regulation: enforcement of the New York Department of Financial Services (NYDFS) Cybersecurity Regulation (Regulation) and the effective date of the Stop Hacks and Improve Electronic Data Security Act (SHIELD Act or Act).

Cybersecurity 104

Cybersecurity Financial Services Data breaches Insurance 104

Hunton Privacy

JULY 5, 2023

On June 28, 2023, the New York Department of Financial Services (“NYDFS”) published an updated proposed Second Amendment (“Amendment”) to its Cybersecurity Regulation, 23 NYCRR Part 500. As described below, senior governing bodies would have new oversight responsibilities under the amendments.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

Data Protection Report

NOVEMBER 14, 2022

On November 9, 2022, the New York Department of Financial Services (NYDFS) officially proposed changes to its cybersecurity regulation and opened a 60-day public comment period. Notice of Cybersecurity Event. Revised Definition of Class A Companies and other Key Requirements. Board Expertise and Oversight.

Cybersecurity 113

Cybersecurity Passwords Risk Compliance 113

Data Matters

FEBRUARY 2, 2021

The National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law has been adopted in at least 11 states, with several others (including New York) having implemented either older or similar laws or administrative guidance.

Insurance 114

Insurance Security Compliance Cybersecurity 114

Data Protection Report

NOVEMBER 8, 2023

On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. This notice requirement explicitly applies to cybersecurity incidents occurring to the covered entity itself, its affiliates, or a third-party service provider.

Financial Services 109

Financial Services Cybersecurity Compliance Government 109

Hunton Privacy

MARCH 11, 2021

On March 3, 2020, the New York Department of Financial Services (“NYDFS”) announced it had entered into a settlement with Residential Mortgage Services, Inc. (“RMS”) RMS”) related to allegations that RMS violated the NYDFS Cybersecurity Regulation in connection with a 2019 data breach. Read the full NYDFS settlement.

Data breaches 97

Data breaches Cybersecurity Financial Services Personal data 97

Data Protection Report

APRIL 22, 2021

On April 14, 2021, the New York Department of Financial Services (NYDFS) announced a $3 million settlement with insurance company National Securities Corp. NSC), relating to violations of three different requirements of the NYDFS cybersecurity regulation during the period 2018 to 2020. NYDFS Cybersecurity Regulation.

Cybersecurity 94

Cybersecurity Financial Services Phishing Compliance 94

Thales Cloud Protection & Licensing

MARCH 6, 2018

Every year, new regulations and compliance orders come into play that impact businesses across the world. This year, the major regulation that will be implemented, is the European Union’s General Data Protection Regulation (GDPR) , which takes effect on May 25, 2018. And this isn’t just happening in New York.

Compliance 88

Compliance GDPR Encryption Data Privacy 88

Data Protection Report

OCTOBER 24, 2022

On October 18, 2022, the New York Department of Financial Services announced a settlement with EyeMed, a licensed life, accident, and health insurer, with respect to a security incident that occurred in 2020. The New York Attorney General had alleged violations of the New York SHIELD Act.

Cybersecurity 52

Cybersecurity Personal data Risk Financial Services 52

Hunton Privacy

MARCH 23, 2021

On March 30, 2021, Hunton Andrews Kurth will host a webinar examining Virginia’s new Consumer Data Protection Act. The law’s requirements will take effect on January 1, 2023, which is the same day that requirements under the new California Privacy Rights Act (“CPRA”) becomes operative. Simpson , Partner, Hunton Andrews Kurth, New York.

Data Privacy 114

Data Privacy Privacy Compliance Cybersecurity 114

HL Chronicle of Data Protection

APRIL 17, 2020

Continuing its focus on COVID-19’s impact on its regulated entities, on April 13, the New York Department of Financial Services (NYDFS) released new cybersecurity guidance in response to the COVID-19 pandemic. Remote Working.

Financial Services 75

Financial Services Risk Cybersecurity Phishing 75

Data Matters

FEBRUARY 10, 2021

On February 4, 2021, the New York Department of Financial Services (NYDFS) issued Circular Letter No. 2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. Obtain Cybersecurity Expertise. Background.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

Thales Cloud Protection & Licensing

NOVEMBER 27, 2018

The cybersecurity regulation ( 23 NYCRR 500 ) adopted by the New York State Department of Financial Services (NYDFS) is nearly two years old. Even though these regulations only apply to New York, financial institutions across the U.S. September Checklist, March Reminder.

Cybersecurity 71

Cybersecurity Financial Services Encryption Data Privacy 71

Data Protection Report

JUNE 2, 2021

On May 13, 2021, the New York Department of Financial Services (NYDFS) announced a $1.8 million settlement with two related insurance companies, relating to violations of two different requirements of the NYDFS cybersecurity regulation during the period 2018 to 2019. NYDFS Cybersecurity Regulation.

Cybersecurity 70

Cybersecurity Insurance Financial Services Phishing 70

HL Chronicle of Data Protection

SEPTEMBER 28, 2018

Please join us for our October 2018 Privacy and Cybersecurity Events. It is entitled “ Data Privacy on Steroids: Sweeping New Data Privacy/Security Regulation in the EU and California, and What it Means for American Business. ”. Location : New York City. GDPR Compliance. Location : New York City.

Privacy 58

Privacy Cybersecurity GDPR Data Privacy 58

Data Matters

APRIL 20, 2021

There just may be a new cybersecurity regulator in town. Department of Labor (DOL) published its first cybersecurity guidance last week ( Cybersecurity Guidance ). The Cybersecurity Guidance is set forth in three parts: Tips for Hiring a Service Provider , directed toward plan sponsors and fiduciaries.

Cybersecurity 68

Cybersecurity Insurance Risk Compliance 68

Data Matters

AUGUST 5, 2019

The flurry of state legislative activity in the wake of the enactment of the California Consumer Protection Act (CCPA) continues with the New York legislature recently passing two bills to increase accountability for the processing of personal information. The Stop Hacks and Improve Electronic Data Security Act.

Cybersecurity 68

Cybersecurity Data breaches Privacy Risk 68

Data Protection Report

DECEMBER 23, 2019

This blogpost summarises our recent webinar: “ An urgent message from Berlin: The importance of record retention in privacy and cybersecurity ”. Increased regulation and enforcement action. In 2019, we saw regulators put a renewed focus on how long businesses retain personal information. In the U.S.,

Privacy 144

Privacy Compliance Personal data Risk 144

Hunton Privacy

JANUARY 24, 2018

On January 22, 2018, the New York Department of Financial Services (“NYDFS”) issued a press release reminding entities covered by its cybersecurity regulation that the first certification of compliance with the regulation is due on or prior to February 15, 2018.

Financial Services 58

Financial Services Cybersecurity Compliance Insurance 58

Data Protection Report

FEBRUARY 8, 2022

On January 24, 2022, the New York Attorney General (AG) announced a settlement with vision-benefits-provider EyeMed Vision Care, Inc., On January 24, 2022, the New York Attorney General (AG) announced a settlement with vision-benefits-provider EyeMed Vision Care, Inc., In total, information for approximately 2.1

Passwords 98

Passwords Financial Services Authentication Insurance 98

Hunton Privacy

JUNE 29, 2018

On June 25, 2018, the New York Department of Financial Services (“NYDFS”) issued a final regulation (the “Regulation”) requiring consumer reporting agencies with “significant operations” in New York to (1) register with NYDFS for the first time and (2) comply with the NYDFS’s cybersecurity regulation.

Cybersecurity 40

Cybersecurity Financial Services Compliance Privacy 40

Data Protection Report

FEBRUARY 8, 2018

February 15, 2018, is quickly approaching and any entity subject to New York’s cybersecurity regulation (23 NYCRR Part 500) must file its first annual certification of compliance with the New York State Department of Financial Services (DFS) by that date.

Cybersecurity 40

Cybersecurity Financial Services Compliance Insurance 40

Hunton Privacy

NOVEMBER 23, 2022

On November 9, 2022, the New York Department of Financial Services (NYDFS) released its second, proposed amendments to the Part 500 Cybersecurity Rule. The proposed amendments revise several aspects of the draft Cybersecurity Rule amendments released on July 29, 2022. Revised Definition of Class A Companies.

Financial Services 55

Financial Services Cybersecurity Ransomware Compliance 55

Hunton Privacy

MARCH 24, 2020

On March 21, 2020, the data security provisions of New York’s Stop Hacks and Improve Electronic Data Security Act (“SHIELD Act”) went into effect. Violations of the SHIELD Act are considered deceptive acts or practices and may be enforced by the New York Attorney General.

Encryption 73

Encryption Passwords Compliance Risk 73

HL Chronicle of Data Protection

SEPTEMBER 28, 2018

Please join us for our October 2018 Privacy and Cybersecurity Events. It is entitled “ Data Privacy on Steroids: Sweeping New Data Privacy/Security Regulation in the EU and California, and What it Means for American Business. ”. Location : New York City. GDPR Compliance. Location : New York City.

Privacy 40

Privacy Cybersecurity GDPR Data Privacy 40

Krebs on Security

JUNE 18, 2021

Title insurance protects homebuyers from the prospect of someone contesting their legitimacy as the new homeowner. “The rule broadly requires firms involved in securities issuance to have a compliance process in place to assure material information follows securities laws,” Satran wrote. billion last year.

Insurance 265

Insurance Risk Financial Services Mining 265

HL Chronicle of Data Protection

FEBRUARY 6, 2020

In today’s connected world, businesses face constant pressure to improve their cybersecurity practices and to confirm that they are meeting industry standards. Jake Nevola, a Law Clerk in our New York office, contributed to this entry.

Cybersecurity 66

Cybersecurity Risk Compliance Access 66

The Last Watchdog

APRIL 3, 2019

This is, in large part, because the complexity of business networks continues to escalate at a time when compliance mandates are intensifying. So people are realizing that identity is having this moment, with identity being the new perimeter.”. Compliance matters. As complexity has intensified, so have compliance challenges.

Digital transformation 104

Digital transformation Insurance Compliance Healthcare 104

HL Chronicle of Data Protection

OCTOBER 4, 2018

Various provisions under the regulations have been implemented on a staggered implementation timeline since that date. As you finalize your organization’s preparations for compliance, we have highlighted below key aspects of these obligations that come into effect on September 4. a)); and. Final Implementation date March 1, 2019.

Cybersecurity 65

Cybersecurity Encryption Financial Services Compliance 65

HL Chronicle of Data Protection

SEPTEMBER 28, 2018

Please join us for our October 2018 Privacy and Cybersecurity Events. It is entitled “ Data Privacy on Steroids: Sweeping New Data Privacy/Security Regulation in the EU and California, and What it Means for American Business. ”. Location : New York City. GDPR Compliance. Location : New York City.

Privacy 40

Privacy Cybersecurity GDPR Data Privacy 40

eSecurity Planet

FEBRUARY 25, 2022

Many cybersecurity audits now ask whether penetration testing is conducted and how vulnerabilities are detected and tracked. For many compliance regimes, an annual penetration test is required, but some organizations may be required to test more frequently. See the top code security and debugging tools. Minimum Requirements.

Phishing 109

Phishing Compliance Risk Cybersecurity 109

Data Protection Report

OCTOBER 1, 2019

Although California has recently captured the lion’s share of attention with respect to privacy and security, on October 23, 2019, New York’s amended security breach law goes into effect, and on March 1, 2020, new security safeguards go live (N.Y. Readers may recall that New York’s security breach notification law (N.Y.

Security 40

Security Financial Services Passwords Risk 40

HL Chronicle of Data Protection

APRIL 1, 2019

The groundbreaking California Consumer Privacy Act (CCPA) takes effect on January 1, 2020, and companies are already working on compliance. Join members of the Hogan Lovells Privacy and Cybersecurity team for our CCPA now program, a valuable opportunity to explore the questions that you need to address now in order to be ready.

Sales 40

Sales Financial Services Privacy Compliance 40