New York State
Department of Financial Services Cybersecurity Regulation
Compliance Dates and Requirements
Are you a Limited Exempt Covered Entity?
All entities regulated by the Department of Financial Services (DFS) are a covered entity under this regulation. However, limited exemption applies to covered entities if:
- fewer than 10 employees (part-time or full-time), including any independent contractors, of the covered entity or its affiliates located in New York or responsible for business of the covered entity, OR
- less than $5,000,000 in gross annual revenue in each of the last three fiscal years from New York business operations of the covered entity and its affiliates, OR
- less than $10,000,000 in year-end total assets, calculated in accordance with generally accepted accounting principles, including
assets of all affiliates