New York’s cybersecurity regulation that went into effect in March has far reaching implications. The first transition date for implementation of several requirements of the state’s Department of Financial Services regulation has passed, the NAIC has revised its draft model cybersecurity law to track the DFS requirements, and Colorado has proposed similar requirements for the securities industry. What should covered entities, including insurance companies and producers, and many others licensed in New York, be doing now? By the first transition date of Aug. 28, covered entities had to meet several of the new requirements.

Originall published in Best’s Review, November 2017.