
What NYDFS Part 500 Requires After the 2023 Amendments: 72-Hour Reporting and the 2025 Deadlines
William ElliottNew York's amended cybersecurity regulation 23 NYCRR 500 imposes a 72-hour ransomware reporting duty and phase-in obligations that conclude in November 2025.
