New York Codes, Rules and Regulations (NYCRR)
Title 23 Part 500
Department of Financial Services
Browse the NYCRR by title, part, and section.
Keep reading with a free account
You’re seeing the citations, headings, dates, and change information for Title 23 Part 500. Create a free account to read the section text.
No credit card required. Sign up with Google, Microsoft, or email.
23 NYCRR 500.0 - Introduction
Related State Register notice: Adopted rule DFS-39-16-00008-A. Published Mar 1, 2017. Notice effective date: Mar 1, 2017.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-39-16-00008-A · Adopted rule
- Related notice published
- Mar 1, 2017
- Related notice effective date
- Mar 1, 2017
Current section text is not available here.
23 NYCRR 500.1 - Definitions
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.2 - Cybersecurity program
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.3 - Cybersecurity policy
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.4 - Cybersecurity governance
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.5 - Vulnerability management
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.6 - Audit trail
Related State Register notice: Adopted rule DFS-39-16-00008-A. Published Mar 1, 2017. Notice effective date: Mar 1, 2017.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-39-16-00008-A · Adopted rule
- Related notice published
- Mar 1, 2017
- Related notice effective date
- Mar 1, 2017
Current section text is not available here.
23 NYCRR 500.7 - Access privileges and management
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.8 - Application security
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.9 - Risk assessment
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.10 - Cybersecurity personnel and intelligence
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.11 - Third-party service provider security policy
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.12 - Multi-factor authentication
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.13 - Asset management and data retention requirements
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.14 - Monitoring and training
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.15 - Encryption of nonpublic information
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.16 - Incident response and business continuity management
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.17 - Notices to superintendent
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.18 - Confidentiality
Related State Register notice: Adopted rule DFS-39-16-00008-A. Published Mar 1, 2017. Notice effective date: Mar 1, 2017.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-39-16-00008-A · Adopted rule
- Related notice published
- Mar 1, 2017
- Related notice effective date
- Mar 1, 2017
Current section text is not available here.
23 NYCRR 500.19 - Exemptions
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.20 - Enforcement
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.21 - Effective date
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.22 - Transitional periods
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.
23 NYCRR 500.23 - Severability
Related State Register notice: Adopted rule DFS-39-16-00008-A. Published Mar 1, 2017. Notice effective date: Mar 1, 2017.
Source version current through Oct 31, 2023
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 31, 2023
- Related Register notice
- DFS-39-16-00008-A · Adopted rule
- Related notice published
- Mar 1, 2017
- Related notice effective date
- Mar 1, 2017
Current section text is not available here.
23 NYCRR 500.24 - Exemptions from electronic filing and submission requirements
Related State Register notice: Adopted rule DFS-45-22-00025-A. Published Nov 1, 2023. Notice effective date: Nov 1, 2023.
Source version current through Oct 7, 2026
Dates and status
- NYCRR title agency
- Department of Financial Services
- Section status
- Section source receipt
- Section text
- Sign in to read this section
- Source version current through
- Oct 7, 2026
- Related Register notice
- DFS-45-22-00025-A · Adopted rule
- Related notice published
- Nov 1, 2023
- Related notice effective date
- Nov 1, 2023
Current section text is not available here.