February filing deadline for (even non-resident) N.Y. licensees
If you conduct business in New York, take note of the next in a series of cybersecurity requirements. As of Thursday, Feb. 15 (and annually thereafter), you must file a certification of compliance with the New York Department of Financial Services (NYDFS).
As a reminder, the NYDFS adopted a cybersecurity rule effective March 2017. The far-reaching regulations apply to resident and non-resident agencies and individual producers licensed to conduct business in New York.
While some non-residents can claim a limited exemption, the exemption is partial. Even for agencies that qualify for the limited exemption, many of the program’s features still must be in place, and requirements – such as filing an annual certification of compliance – still are required.
HOW TO FILE
Per the NYDFS frequently asked questions on the rule, “Certifications of Compliance … should be filed electronically via the DFS Web Portal.” If you don’t already have an account, you will be prompted to create one before accessing the filing interface.
As mentioned above, the NYDFS considers the filing of exemptions applicable to agencies and individual producers which hold a New York license. The annual certification of compliance due by Feb. 15 applies to agencies.