Remove tag payment-card-2
article thumbnail

Historic Charges: First Enforcement Action Filed by New York Department of Financial Services Under Cybersecurity Regulation

Data Matters

2 Because First American’s violations included the exposure of millions of documents containing nonpublic information (NPI), the total penalty potentially could be substantial. implement controls, including encryption, to protect NPI held or transmitted both in transit over external networks and at rest (23 NYCRR § 500.15).