Account

Sign in to access your account and subscription

New York's Cyber Regulation Two Years Later: We've Only Just Begun

<b><i>The Conclusion of the “Transitional Period” for New York's Cybersecurity Regulation Marks the Beginning, Rather Than the End, of an Organization's Compliance Efforts</b></i><p> Financial institutions will have to certify annually that their internal controls and cybersecurity practices remain up to snuff. And now that the transitional periods for implementing the cyber regulation have passed, covered institutions will need to certify that they have complied with each provision.

8 minute read May 01, 2019 at 02:49 AM
By
Craig A. Newman and Kade N. Olsen
New York's Cyber Regulation Two Years Later: We've Only Just Begun

Financial institutions regulated by New York's Department of Financial Services (DFS) can breathe a sigh of relief, at least temporarily. Two years after DFS's Cybersecurity Requirements for Financial Institutions

This premium content is locked for LawJournalNewsletters subscribers only

ENJOY UNLIMITED ACCESS TO THE SINGLE SOURCE OF OBJECTIVE LEGAL ANALYSIS, PRACTICAL INSIGHTS, AND NEWS IN LawJournalNewsletters

  • Stay current on the latest information, rulings, regulations, and trends
  • Includes practical, must-have information on copyrights, royalties, AI, and more
  • Tap into expert guidance from top entertainment lawyers and experts

Already have an account? Sign In Now

For enterprise-wide or corporate access, please contact Customer Service at [email protected] or call 1-877-256-2473.

NOT FOR REPRINT

© 2026 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Continue Reading

AI claims are getting more scrutiny and regulators are looking more closely at whether organizations can substantiate what they say their AI does, while courts are beginning to address what happens when AI-generated search summaries get information wrong.

November 01, 2026

This is the second in a two-part series on AI-driven crises. Part 1 examined communications during an incident while the facts are still developing. Part 2 addresses crisis plans, governance and tabletop exercises before an agent acts on behalf of the business.

November 01, 2026