23 CRR-NY 201.7NY-CRR

OFFICIAL COMPILATION OF CODES, RULES AND REGULATIONS OF THE STATE OF NEW YORK
TITLE 23. FINANCIAL SERVICES
CHAPTER I. REGULATIONS OF THE SUPERINTENDENT OF FINANCIAL SERVICES
PART 201. REGISTRATION REQUIREMENTS AND PROHIBITED PRACTICES FOR CREDIT REPORTING AGENCIES
23 CRR-NY 201.7
23 CRR-NY 201.7
201.7 Cybersecurity.
(a) Every consumer credit reporting agency that is required to be registered pursuant to section 201.2 of this Part shall be deemed to be a covered entity and shall comply with the following provisions in Part 500 of this Title: 500.2, 500.3, 500.4, 500.5, 500.6, 500.7, 500.8, 500.9, 500.10, 500.11, 500.12, 500.13, 500.14, 500.15, 500.16, 500.17, 500.18, 500.20.
(b) Except as provided in subdivision (c) of this section, a consumer credit reporting agency shall have until November 1, 2018 to comply with this section.
(c) A consumer credit reporting agency shall have:
(1) until February 28, 2019 to comply with the requirements of sections 500.4(b), 500.5, 500.9, 500.12, and 500.14(a)(2) of this Title;
(2) until August 31, 2019 to comply with the requirements of sections 500.6, 500.8, 500.13, 500.14(a)(1) and 500.15 of this Title;
(3) until December 31, 2019 to comply with the requirements of section 500.11 of this Title.
23 CRR-NY 201.7
Current through November 30, 2020
End of Document