On February 1, NY DFS announced the adoption of the final regulation implementing the New York State Commercial Finance Disclosure Law. The final regulations clarified the definition of financial institution exempts subsidiaries and affiliates of exempted banks and credit unions.
The NY DFS released updated guidance with regard to better protecting consumers in the event of virtual currency insolvency. This updated guidance applies to entities that DFS has licensed or chartered to hold or maintain virtual currency assets on behalf of their customers.
Companies can mitigate supply chain risk by identifying the person(s) responsible for the vendor’s cybersecurity, how the vendors protects sensitive data and how the vendor identifies, prioritizes, escalates and reports cybersecurity incidents – internally and externally.