Expert Q&A on Lessons Learned from the First NYDFS Cybersecurity Enforcement Action | Practical Law

Expert Q&A on Lessons Learned from the First NYDFS Cybersecurity Enforcement Action | Practical Law

An expert Q&A with Jason Carney, Robert Goodall, and JJ Bollozos from the Thomson Reuters Privacy Office discussing what organizations may learn from the first enforcement action under the New York Department of Financial Services (NYDFS) Cybersecurity Requirements for Financial Services Companies (23 NYCRR §§ 500.0 to 500.23). NYDFS has accused First American Title Insurance Co. of failing to timely remedy multiple cybersecurity failures and allegedly exposing millions of consumers' nonpublic information (NPI) to the public internet.

Expert Q&A on Lessons Learned from the First NYDFS Cybersecurity Enforcement Action

by Practical Law Data Privacy & Cybersecurity
Published on 21 Oct 2020 • New York, USA (National/Federal)
An expert Q&A with Jason Carney, Robert Goodall, and JJ Bollozos from the Thomson Reuters Privacy Office discussing what organizations may learn from the first enforcement action under the New York Department of Financial Services (NYDFS) Cybersecurity Requirements for Financial Services Companies (23 NYCRR §§ 500.0 to 500.23). NYDFS has accused First American Title Insurance Co. of failing to timely remedy multiple cybersecurity failures and allegedly exposing millions of consumers' nonpublic information (NPI) to the public internet.