23 CRR-NY 201.7NY-CRR
23 CRR-NY 201.7
23 CRR-NY 201.7
201.7 Cybersecurity.
(a) Every consumer credit reporting agency that is required to be registered pursuant to section 201.2 of this Part shall be deemed to be a covered entity and shall comply with the following provisions in Part 500 of this Title: 500.2, 500.3, 500.4, 500.5, 500.6, 500.7, 500.8, 500.9, 500.10, 500.11, 500.12, 500.13, 500.14, 500.15, 500.16, 500.17, 500.18, 500.20.
(b) Except as provided in subdivision (c) of this section, a consumer credit reporting agency shall have until November 1, 2018 to comply with this section.
(c) A consumer credit reporting agency shall have:
(1) until February 28, 2019 to comply with the requirements of sections 500.4(b), 500.5, 500.9, 500.12, and 500.14(a)(2) of this Title;
(2) until August 31, 2019 to comply with the requirements of sections 500.6, 500.8, 500.13, 500.14(a)(1) and 500.15 of this Title;
(3) until December 31, 2019 to comply with the requirements of section 500.11 of this Title.
23 CRR-NY 201.7
Current through June 15, 2022
| End of Document |