Recent developments about the New York State Department of Financial Services
(Not affiliated with NYDFS; just a blog.)
NYDFS issued a so-called “Pre-Proposal” for regulation providing for assessments of entities with a BitLicense, pursuant to the New York budget legislation passed in the Spring authorizing these assessments. Cryptocurrency entities chartered by NYDFS as a limited purpose trust charter will continue to be assessed under the regulations issued under the Banking Law. Comments on … Read more
NYDFS entered into another cybersecurity Consent Order, this time with TTEC Healthcare Solutions, Inc. an insurance broker. Cybersecurity actions have become one of the agency’s most common types of enforcement actions. This one carries a $1.9 Million penalty; some takeaways from DFS allegations include: • TTEC failed to implement adequate multi-factor authentication. • TTEC completely failed to … Read more
SELF REPORTING TO NYDFS – ITS NOT YOUR MONACO MEMO (Part One): Pleased that the New York Law Journal has published Part One of my latest article about self-reporting misconduct by financial institutions regulated by the New York State Department of Financial Services (NYDFS). Article is here: http://blogaboutnydfs.com/wp-content/uploads/2022/12/NYLJ11292022562493-DFSReporting-Part-One.pdf
OFAC issued an enforcement action against the U.S.-based crypto exchange Kraken. What is perhaps most striking is how this matter is much more like the run-of-the-mill OFAC enforcement action against a mature financial institution, and not a start up. Key language from OFAC: “This case also demonstrates the value of a company implementing robust remedial … Read more
Is Cryptocurrency at a Regulatory Fork? On the one hand, regulated institutions like Gemini are seeking to mirror practices in traditional financial services, like greater transparency for customers. See https://www.gemini.com/blog/announcing-the-gemini-trust-center-building-trust-through-transparency. On the other, are sentiments expressed by people like Sam Bankman-Fried in his interview with Vox — a must read. Interview here: https://www.vox.com/future-perfect/23462333/sam-bankman-fried-ftx-cryptocurrency-effective-altruism-crypto-bahamas-philanthropy
According to Superintendent Harris, NYDFS will issue additional guidance for cryptocurrency firms. Superintendent Harris via Law360: “We’ll have more to say on capitalization,….You’ll hear more from us on consumer protection, disclosures, advertising … [and] complaints, making sure these companies have an easy way for consumers to complain. . . . Harris indicated that the forthcoming … Read more
CHIEF FEDERAL BANKING REGULATOR MICHAEL HSU, THE ACTING COMPTROLLER OF THE CURRENCY, IS “CAREFUL AND CAUTIOUS” ON CRYPTO — Michael Hsu: “Last year, the OCC adopted a “careful and cautious” approach to crypto activities by national banks. This helped mitigate the risk of contagion from crypto to the banking system. Years of reform and rebuilding … Read more
Superintendent Adrienne A. Harris, Peter Marton & Kaitlin Asrow spoke today at The Brookings Institution about FTX, indicating NY residents had limited exposure to the collapse because (a) FTX had not yet been licensed to operate in NY (it had a pending application) and (b) FTX’s own coin, FTT, had not yet been greenlisted by DFS. Video of the interviews is here: https://www.brookings.edu/events/digital-asset-regulation-the-state-perspective/?utm_campaign=events%3a%20economic%20studies&utm_medium=email&utm_content=231476264&utm_source=hs_automation
Are Twitter Users Really the Best Regulator for Crypto? Regarding Crypto.com‘s erroneous transfer of $400 million, the Wall Street Journal Reports: “The transfer of a large chunk of ether, a popular cryptocurrency, took place on Oct. 21, but came to light after Twitter users flagged the transfer as unusual, based on publicly available blockchain transaction … Read more
NYDFS Proposed amendments to its Cybersecurity Regulation, “Part 500.” According to DFS, the amendments include: – Creation of three tiers of companies, further tailoring the regulation to a diverse set of businesses with different defensive needs. – Enhanced governance requirements, thereby increasing accountability for cybersecurity at the Board and C-Suite levels. – Additional controls to … Read more