Remove tag adequacy
article thumbnail

Historic Charges: First Enforcement Action Filed by New York Department of Financial Services Under Cybersecurity Regulation

Data Matters

4 The Regulation sets minimum standards for compliance related to the assessment of cybersecurity risks, the prevention and detection of security events, and post-breach management. implement controls, including encryption, to protect NPI held or transmitted both in transit over external networks and at rest (23 NYCRR ยง 500.15).