$8 million penalty to NYDFS – and another case of over-retention
Data Protection Report
JANUARY 18, 2024
NYDFS found that GGT’s data classification policies and procedures “were incomplete, thus resulting in significant concerns regarding GGT’s ability to adequately assess its compliance with the Cybersecurity Regulation’s access privilege, data disposal, and encryption requirements.
Let's personalize your content