Main Menu

New York’s Department of Financial Services Initiates Its First Enforcement Action Under Its 2017 Cybersecurity Regulations

MSK Client Alert
August 4, 2020

Following a publicized commitment to increased cybersecurity enforcement, the New York Department of Financial Services (“NYDFS”) initiated its first enforcement action against First American Title Insurance Co. (“First American”) on July 22, 2020. Stemming from First American’s alleged failure to adequately safeguard highly confidential, personal consumer information – including bank account numbers and statements, mortgage and tax records, Social Security numbers, wire transaction receipts, and drivers’ license images – this action is the first of its kind brought under NYDFS’s expansive Cybersecurity Regulations (the “Regulations”). The Regulations took effect on March 1, 2017 and established strict cybersecurity requirements for financial services companies licensed to operate under New York’s Banking Law, Insurance Law or Financial Services Law (a “covered entity”).

Among other requirements, the Regulations require a covered entity to:

View Full Alert

Back to Page