NYDFS issued what it called a “Pre-Proposed Outreach” for Proposed Amendments to Its Cybersecurity Regulation. The changes are significant and in some sense more prescriptive.
Comments are due August 8; to be followed by the actual proposed rulemaking under the state Administrative Procedure Act and a 60-day comment period.
The NYDFS Pre-Proposal is available here: pre_proposed_draft_23nycrr500_amd2