Blog
NYDFS: Final set of cybersecurity requirements under amended Part 500 take effect November 1, 2025
On November 1, 2025, additional cybersecurity requirements introduced by the Second Amendment to the New York Department of Financial Services (NYDFS) Cybersecurity Regulation (23 NYCRR Part 500) (the “Second Amendment”) will take effect. The updated requirements for all covered entities consist of expanding multi-factor authentication (“MFA”) and adopting written procedures for creating and maintaining information system asset inventories. The regulation grants a limited exemption to the…
By: Hogan Lovells