Remove tag payment-card-2
article thumbnail

Historic Charges: First Enforcement Action Filed by New York Department of Financial Services Under Cybersecurity Regulation

Data Matters

2 Because First American’s violations included the exposure of millions of documents containing nonpublic information (NPI), the total penalty potentially could be substantial. conduct a periodic risk assessment of the its information systems sufficient to inform the design of its cybersecurity program (23 NYCRR § 500.09).