Remove tag adequacy
article thumbnail

Historic Charges: First Enforcement Action Filed by New York Department of Financial Services Under Cybersecurity Regulation

Data Matters

maintain and implement data governance and classification policies for NPI suitable to its business model and associated risks and maintain an appropriate, risk-based policy governing access controls for applications that contain or transmit NPI (23 NYCRR ยง 500.03). e) and 500.01(g), g), respectively.