Statutes, codes, and regulations
New York Codes, Rules and Regulations
Title 23 - FINANCIAL SERVICESChapter I - Regulations of the Superintendent of Financial Services
Part 201 - Registration Requirements and Prohibited Practices for Credit Reporting Agencies
Section 201.7 - Cybersecurity

N.Y. Comp. Codes R. & Regs. tit. 23 § 201.7

Download
PDF
Current through Register Vol. 46, No. 36, September 4, 2024
Section 201.7 - Cybersecurity
(a) Every consumer credit reporting agency that is required to be registered pursuant to 201.02 shall be deemed to be a Covered Entity and shall comply with the following provisions in Part 500 of this Title: 500.02, 500.03, 500.04, 500.05, 500.06, 500.07, 500.08, 500.09, 500.10, 500.11, 500.12, 500.13, 500.14, 500.15, 500.16, 500.17, 500.18, 500.20.
(b) Except as provided in subsection (c), a consumer credit reporting agency shall have until November 1, 2018 to comply with this section.
(c) A consumer credit reporting agency shall have:
(1) Until February 28, 2019 to comply with the requirements of sections 500.04(b), 500.05, 500.09, 500.12, and 500.14(a)(2) of this Part.
(2) Until August 31, 2019 to comply with the requirements of sections 500.06, 500.08, 500.13, 500.14(a)(1) and 500.15 of this Part.
(3) Until December 31, 2019 to comply with the requirements of section 500.11 of this Part.

N.Y. Comp. Codes R. & Regs. Tit. 23 § 201.7

Adopted New York State Register July 3, 2018/Volume XL, Issue 27, eff. 7/3/2018