As cybersecurity breaches grow more complex and frequent, regulators are increasingly focused on organizational compliance. Organizations such as Crowdstrike report that in 2025, cyberattacks are increasing in speed, volume, and sophistication—and cybercrime has evolved as a “highly efficient business.” The escalating threat landscape demands robust security frameworks that can withstand evolving risks.
Enter the amendments announced in November 2023 to the New York’s Department of Financial Services (NYDFS) Cybersecurity Regulation, 23 NYCRR Part 500 (“Amended Regulation”), that became effective on November 1, 2025. This post explores the breadth of these Amended Regulations, and the steps that covered entities need to take now.
Blog Editors
Recent Updates
- VHRA Updates: Virginia Widens Employer Coverage and Extends Discrimination Complaint Filing Deadlines
- Watch: States Are Now Writing the Workplace AI Rules - Employment Law This Week
- Watch: Hemant Gupta Bridges the Gap Between Cutting-Edge Technology and Intellectual Property Protection
- A Proposed Overhaul to Federal Grantmaking: What It Could Mean for Grantees, Healthcare and Other Researchers, and Colleges and Universities
- Watch: Agencies Step Up DEI Scrutiny, DOL Clarifies Overtime Rules, and California Court Limits PAGA Claims - Employment Law This Week