ELANY Publishes Practical Tips on Applying New York’s New Cybersecurity Regulation to “Unique Situations”

There has been a lot of commentary on New York’s new regulation entitled Cybersecurity Requirements for Financial Services Companies (23 NYCRR 500) (the Regulation) which went into effect on March 1, 2017. On March 16, 2017, The Excess Line Association of New York (ELANY) released Bulletin 2017-12 which contains some practical guidance for insurance producers that will face some “unique situations” not addressed in the other commentary.

Specifically, the bulletin refers to insurance producers that “may not meet the technical definition of a ‘Third Party …

Continue Reading

Comments on NYSDFS Cybersecurity Regulation Begin Pouring In

On September 28, 2016, the New York State Department of Financial Services (DFS) released for comment a proposed new regulation entitled Cybersecurity Requirements for Financial Services Companies (23 N.Y.C.R.R. Part 500). Various industry groups have offered comments and expressed concerns about some of its requirements. These concerns include the costs of compliance and the scope of entities regulated by the proposed rule. Among the organizations offering comments are the Excess Lines Association of New York (ELANY) and the American Association of Managing General Agents (AAMGA).…

Continue Reading