New York State

Department of Financial Services Cybersecurity Regulation



Compliance Dates and Requirements


Are you a Limited Exempt Covered Entity?

All entities regulated by the Department of Financial Services (DFS) are a covered entity under this regulation. However, limited exemption applies to covered entities if:

  • fewer than 10 employees (part-time or full-time), including any independent contractors, of the covered entity or its affiliates located in New York or responsible for business of the covered entity, OR
  • less than $5,000,000 in gross annual revenue in each of the last three fiscal years from New York business operations of the covered entity and its affiliates, OR
  • less than $10,000,000 in year-end total assets, calculated in accordance with generally accepted accounting principles, including
    assets of all affiliates

The requirements may appear daunting but we can help.


Contact Us