BEGIN:VCALENDAR VERSION:2.0 PRODID:-//fru.dev//Rulebook//EN CALSCALE:GREGORIAN METHOD:PUBLISH X-WR-CALNAME:Regulation deadlines (Rulebook) X-WR-CALDESC:Compliance deadlines tracked at rulebook.fru.dev REFRESH-INTERVAL;VALUE=DURATION:P1D X-PUBLISHED-TTL:P1D BEGIN:VEVENT UID:deadline-269@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20170301 DTEND;VALUE=DATE:20170302 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Part 500 effective DESCRIPTION:Original cybersecurity regulation takes effect.\n\nNew York DFS Cybersecurity Requirements for Financial Services Companies (23 NYCRR Par t 500)\, Second Amendment (New York)\n\nSource: https://www.dfs.ny.gov/cyb ersecurity/23-NYCRR-Part-500\n\nhttps://rulebook.fru.dev/regulations/us-ny -dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-233@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20220110 DTEND;VALUE=DATE:20220111 SUMMARY:GLBA Safeguards Rule: 2021 Safeguards Rule amendments effective DESCRIPTION:The amended Safeguards Rule published December 9\, 2021 took ef fect\, with the more detailed program elements in 314.5 deferred.\n\nFTC S tandards for Safeguarding Customer Information (Safeguards Rule)\, 16 CFR Part 314\, under the Gramm-Leach-Bliley Act (United States (Federal))\n\nS ource: https://www.federalregister.gov/documents/2021/12/09/2021-25736/sta ndards-for-safeguarding-customer-information\n\nhttps://rulebook.fru.dev/r egulations/us-glba-safeguards URL:https://rulebook.fru.dev/regulations/us-glba-safeguards CATEGORIES:United States (Federal),financial,cybersecurity,breach-notificat ion,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-70@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20230116 DTEND;VALUE=DATE:20230117 SUMMARY:DORA: DORA enters into force DESCRIPTION:Entered into force on the twentieth day after publication in OJ L 333 of 27 Dec 2022 (Art 64).\n\nRegulation (EU) 2022/2554 on digital op erational resilience for the financial sector (Digital Operational Resilie nce Act) (European Union)\n\nSource: https://eur-lex.europa.eu/eli/reg/202 2/2554/oj\n\nhttps://rulebook.fru.dev/regulations/eu-dora URL:https://rulebook.fru.dev/regulations/eu-dora CATEGORIES:European Union,cybersecurity,financial,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-234@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20230609 DTEND;VALUE=DATE:20230610 SUMMARY:GLBA Safeguards Rule: Compliance with expanded security program ele ments DESCRIPTION:Applicability of the 314.5 provisions (qualified individual\, w ritten risk assessment\, encryption\, MFA\, pen testing\, incident respons e plan\, board reporting) was delayed from December 9\, 2022 to this date. \n\nFTC Standards for Safeguarding Customer Information (Safeguards Rule)\ , 16 CFR Part 314\, under the Gramm-Leach-Bliley Act (United States (Feder al))\n\nSource: https://www.federalregister.gov/documents/2022/11/23/2022- 25201/standards-for-safeguarding-customer-information\n\nhttps://rulebook. fru.dev/regulations/us-glba-safeguards URL:https://rulebook.fru.dev/regulations/us-glba-safeguards CATEGORIES:United States (Federal),financial,cybersecurity,breach-notificat ion,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-270@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20231101 DTEND;VALUE=DATE:20231102 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Second Amendment effecti ve DESCRIPTION:Second Amendment takes effect\; 500.19(e)-(h)\, 500.20\, 500.21 \, 500.22 and 500.24 apply immediately.\n\nNew York DFS Cybersecurity Requ irements for Financial Services Companies (23 NYCRR Part 500)\, Second Ame ndment (New York)\n\nSource: https://www.dfs.ny.gov/cybersecurity/23-NYCRR -Part-500\n\nhttps://rulebook.fru.dev/regulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-271@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20231201 DTEND;VALUE=DATE:20231202 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Amended notification req uirements (500.17) DESCRIPTION:New 72-hour event notice\, 24-hour extortion payment notice and certification changes apply (30 days).\n\nNew York DFS Cybersecurity Requ irements for Financial Services Companies (23 NYCRR Part 500)\, Second Ame ndment (New York)\n\nSource: https://www.dfs.ny.gov/cybersecurity/23-NYCRR -Part-500\n\nhttps://rulebook.fru.dev/regulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-290@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20231215 DTEND;VALUE=DATE:20231216 SUMMARY:SEC Cyber Disclosure Rules: Annual cybersecurity disclosures begin (Item 106 / 16K) DESCRIPTION:Required in annual reports for fiscal years ending on or after this date.\n\nSEC Cybersecurity Risk Management\, Strategy\, Governance\, and Incident Disclosure (Release No. 33-11216) (United States (Federal))\n \nSource: https://www.federalregister.gov/documents/2023/08/04/2023-16194/ cybersecurity-risk-management-strategy-governance-and-incident-disclosure\ n\nhttps://rulebook.fru.dev/regulations/us-sec-cyber URL:https://rulebook.fru.dev/regulations/us-sec-cyber CATEGORIES:United States (Federal),cybersecurity,breach-notification,financ ial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-291@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20231218 DTEND;VALUE=DATE:20231219 SUMMARY:SEC Cyber Disclosure Rules: Form 8-K Item 1.05 incident disclosure begins DESCRIPTION:All registrants other than smaller reporting companies must fil e material incident disclosures from this date.\n\nSEC Cybersecurity Risk Management\, Strategy\, Governance\, and Incident Disclosure (Release No. 33-11216) (United States (Federal))\n\nSource: https://www.federalregister .gov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strateg y-governance-and-incident-disclosure\n\nhttps://rulebook.fru.dev/regulatio ns/us-sec-cyber URL:https://rulebook.fru.dev/regulations/us-sec-cyber CATEGORIES:United States (Federal),cybersecurity,breach-notification,financ ial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-272@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20240415 DTEND;VALUE=DATE:20240416 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Annual compliance notifi cation DESCRIPTION:Certification of compliance or acknowledgment of non-compliance due (recurs every April 15).\n\nNew York DFS Cybersecurity Requirements f or Financial Services Companies (23 NYCRR Part 500)\, Second Amendment (Ne w York)\n\nSource: https://www.dfs.ny.gov/cybersecurity/23-NYCRR-Part-500\ n\nhttps://rulebook.fru.dev/regulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-273@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20240429 DTEND;VALUE=DATE:20240430 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): General 180-day transiti on ends DESCRIPTION:Most new Second Amendment requirements apply\, e.g. annual repo rting to the board and risk assessment updates.\n\nNew York DFS Cybersecur ity Requirements for Financial Services Companies (23 NYCRR Part 500)\, Se cond Amendment (New York)\n\nSource: https://www.dfs.ny.gov/cybersecurity/ 23-NYCRR-Part-500\n\nhttps://rulebook.fru.dev/regulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-235@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20240513 DTEND;VALUE=DATE:20240514 SUMMARY:GLBA Safeguards Rule: FTC breach notification requirement effective DESCRIPTION:Section 314.4(j) requires notice to the FTC within 30 days of d iscovering a notification event involving at least 500 consumers.\n\nFTC S tandards for Safeguarding Customer Information (Safeguards Rule)\, 16 CFR Part 314\, under the Gramm-Leach-Bliley Act (United States (Federal))\n\nS ource: https://www.federalregister.gov/documents/2023/11/13/2023-24412/sta ndards-for-safeguarding-customer-information\n\nhttps://rulebook.fru.dev/r egulations/us-glba-safeguards URL:https://rulebook.fru.dev/regulations/us-glba-safeguards CATEGORIES:United States (Federal),financial,cybersecurity,breach-notificat ion,privacy TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-292@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20240615 DTEND;VALUE=DATE:20240616 SUMMARY:SEC Cyber Disclosure Rules: Smaller reporting companies: Item 1.05 compliance DESCRIPTION:Smaller reporting companies must begin complying with Form 8-K Item 1.05 incident disclosure.\n\nSEC Cybersecurity Risk Management\, Stra tegy\, Governance\, and Incident Disclosure (Release No. 33-11216) (United States (Federal))\n\nSource: https://www.federalregister.gov/documents/20 23/08/04/2023-16194/cybersecurity-risk-management-strategy-governance-and- incident-disclosure\n\nhttps://rulebook.fru.dev/regulations/us-sec-cyber URL:https://rulebook.fru.dev/regulations/us-sec-cyber CATEGORIES:United States (Federal),cybersecurity,breach-notification,financ ial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-295@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20240802 DTEND;VALUE=DATE:20240803 SUMMARY:SEC Regulation S-P: Amendments effective DESCRIPTION:The Regulation S-P amendments became effective\; compliance tie red by entity size.\n\nRegulation S-P: Privacy of Consumer Financial Infor mation and Safeguarding Customer Information (2024 amendments) (United Sta tes (Federal))\n\nSource: https://www.federalregister.gov/documents/2024/0 6/03/2024-11116/regulation-s-p-privacy-of-consumer-financial-information-a nd-safeguarding-customer-information\n\nhttps://rulebook.fru.dev/regulatio ns/us-sec-reg-sp URL:https://rulebook.fru.dev/regulations/us-sec-reg-sp CATEGORIES:United States (Federal),financial,privacy,cybersecurity,breach-n otification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-274@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20241101 DTEND;VALUE=DATE:20241102 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Governance\, encryption\ , IR/BCDR\, exemptions DESCRIPTION:500.4 governance\, 500.15 encryption\, 500.16 incident response and business continuity plans\, and 500.19(a) revised exemptions apply.\n \nNew York DFS Cybersecurity Requirements for Financial Services Companies (23 NYCRR Part 500)\, Second Amendment (New York)\n\nSource: https://www. dfs.ny.gov/cybersecurity/23-NYCRR-Part-500\n\nhttps://rulebook.fru.dev/reg ulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-293@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20241215 DTEND;VALUE=DATE:20241216 SUMMARY:SEC Cyber Disclosure Rules: Inline XBRL tagging of annual cybersecu rity disclosures DESCRIPTION:Item 106 / Item 16K disclosures must be tagged in Inline XBRL f or fiscal years ending on or after this date.\n\nSEC Cybersecurity Risk Ma nagement\, Strategy\, Governance\, and Incident Disclosure (Release No. 33 -11216) (United States (Federal))\n\nSource: https://www.federalregister.g ov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strategy- governance-and-incident-disclosure\n\nhttps://rulebook.fru.dev/regulations /us-sec-cyber URL:https://rulebook.fru.dev/regulations/us-sec-cyber CATEGORIES:United States (Federal),cybersecurity,breach-notification,financ ial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-294@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20241218 DTEND;VALUE=DATE:20241219 SUMMARY:SEC Cyber Disclosure Rules: Inline XBRL tagging of Item 1.05 disclo sures DESCRIPTION:Form 8-K Item 1.05 and Form 6-K incident disclosures must be ta gged in Inline XBRL.\n\nSEC Cybersecurity Risk Management\, Strategy\, Gov ernance\, and Incident Disclosure (Release No. 33-11216) (United States (F ederal))\n\nSource: https://www.federalregister.gov/documents/2023/08/04/2 023-16194/cybersecurity-risk-management-strategy-governance-and-incident-d isclosure\n\nhttps://rulebook.fru.dev/regulations/us-sec-cyber URL:https://rulebook.fru.dev/regulations/us-sec-cyber CATEGORIES:United States (Federal),cybersecurity,breach-notification,financ ial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-71@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20250117 DTEND;VALUE=DATE:20250118 SUMMARY:DORA: DORA applies DESCRIPTION:All DORA obligations (ICT risk management\, incident reporting\ , testing\, third-party risk\, register of information) apply from 17 Jan 2025 (Art 64).\n\nRegulation (EU) 2022/2554 on digital operational resilie nce for the financial sector (Digital Operational Resilience Act) (Europea n Union)\n\nSource: https://eur-lex.europa.eu/eli/reg/2022/2554/oj\n\nhttp s://rulebook.fru.dev/regulations/eu-dora URL:https://rulebook.fru.dev/regulations/eu-dora CATEGORIES:European Union,cybersecurity,financial,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-227@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20250408 DTEND;VALUE=DATE:20250409 SUMMARY:DOJ Bulk Data Rule: Prohibitions and restrictions take effect DESCRIPTION:Core prohibitions on covered data transactions and security req uirements for restricted transactions apply.\n\nPreventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concer n or Covered Persons (28 CFR Part 202) - DOJ Data Security Program (United States (Federal))\n\nSource: https://www.federalregister.gov/documents/20 25/01/08/2024-31486/preventing-access-to-us-sensitive-personal-data-and-go vernment-related-data-by-countries-of-concern\n\nhttps://rulebook.fru.dev/ regulations/us-doj-bulk-data URL:https://rulebook.fru.dev/regulations/us-doj-bulk-data CATEGORIES:United States (Federal),privacy,data-residency,cybersecurity,bio metrics,health,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-72@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20250430 DTEND;VALUE=DATE:20250501 SUMMARY:DORA: First registers of information submitted to the ESAs DESCRIPTION:Competent authorities had to submit financial entities' registe rs of ICT third-party contractual arrangements (reference date 31 Mar 2025 ) to the ESAs by 30 Apr 2025. National authorities set earlier deadlines f or entities.\n\nRegulation (EU) 2022/2554 on digital operational resilienc e for the financial sector (Digital Operational Resilience Act) (European Union)\n\nSource: https://www.eba.europa.eu/publications-and-media/press-r eleases/esas-announce-timeline-collect-information-designation-critical-ic t-third-party-service-providers\n\nhttps://rulebook.fru.dev/regulations/eu -dora URL:https://rulebook.fru.dev/regulations/eu-dora CATEGORIES:European Union,cybersecurity,financial,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-275@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20250501 DTEND;VALUE=DATE:20250502 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Vulnerability scans\, ac cess privileges\, malware controls\, Class A monitoring DESCRIPTION:500.5(a)(2) automated scans\, 500.7 access privilege restrictio ns\, 500.14(a)(2) malicious code protection\, and 500.14(b) Class A endpoi nt detection and centralized logging apply.\n\nNew York DFS Cybersecurity Requirements for Financial Services Companies (23 NYCRR Part 500)\, Second Amendment (New York)\n\nSource: https://www.dfs.ny.gov/cybersecurity/23-N YCRR-Part-500\n\nhttps://rulebook.fru.dev/regulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-73@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20250708 DTEND;VALUE=DATE:20250709 SUMMARY:DORA: TLPT regulatory technical standards enter into force DESCRIPTION:Commission Delegated Regulation (EU) 2025/1190 (published 18 Ju ne 2025) sets criteria for which financial entities must run threat-led pe netration testing\, plus methodology and tester requirements.\n\nRegulatio n (EU) 2022/2554 on digital operational resilience for the financial secto r (Digital Operational Resilience Act) (European Union)\n\nSource: https:/ /eur-lex.europa.eu/eli/reg_del/2025/1190/oj\n\nhttps://rulebook.fru.dev/re gulations/eu-dora URL:https://rulebook.fru.dev/regulations/eu-dora CATEGORIES:European Union,cybersecurity,financial,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-228@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20251006 DTEND;VALUE=DATE:20251007 SUMMARY:DOJ Bulk Data Rule: Due diligence\, audit and reporting obligations apply DESCRIPTION:Subpart J (data compliance program\, due diligence and audits f or restricted transactions) and reporting requirements in 202.1103 and 202 .1104 apply.\n\nPreventing Access to U.S. Sensitive Personal Data and Gove rnment-Related Data by Countries of Concern or Covered Persons (28 CFR Par t 202) - DOJ Data Security Program (United States (Federal))\n\nSource: ht tps://www.federalregister.gov/documents/2025/01/08/2024-31486/preventing-a ccess-to-us-sensitive-personal-data-and-government-related-data-by-countri es-of-concern\n\nhttps://rulebook.fru.dev/regulations/us-doj-bulk-data URL:https://rulebook.fru.dev/regulations/us-doj-bulk-data CATEGORIES:United States (Federal),privacy,data-residency,cybersecurity,bio metrics,health,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-276@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20251101 DTEND;VALUE=DATE:20251102 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Universal MFA and asset inventory DESCRIPTION:500.12 multi-factor authentication for all users and 500.13(a) asset inventory requirements apply.\n\nNew York DFS Cybersecurity Requirem ents for Financial Services Companies (23 NYCRR Part 500)\, Second Amendme nt (New York)\n\nSource: https://www.dfs.ny.gov/cybersecurity/23-NYCRR-Par t-500\n\nhttps://rulebook.fru.dev/regulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-74@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20251118 DTEND;VALUE=DATE:20251119 SUMMARY:DORA: First critical ICT third-party providers designated DESCRIPTION:The ESAs published the first list of 19 critical ICT third-part y providers (including AWS\, Google Cloud and Microsoft)\, which now come under direct EU oversight.\n\nRegulation (EU) 2022/2554 on digital operati onal resilience for the financial sector (Digital Operational Resilience A ct) (European Union)\n\nSource: https://www.eba.europa.eu/publications-and -media/press-releases/european-supervisory-authorities-designate-critical- ict-third-party-providers-under-digital\n\nhttps://rulebook.fru.dev/regula tions/eu-dora URL:https://rulebook.fru.dev/regulations/eu-dora CATEGORIES:European Union,cybersecurity,financial,breach-notification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-296@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20251203 DTEND;VALUE=DATE:20251204 SUMMARY:SEC Regulation S-P: Larger entities must comply DESCRIPTION:Larger covered institutions (18 months after Federal Register p ublication) must have incident response programs\, 30-day customer notific ation\, and service-provider oversight in place.\n\nRegulation S-P: Privac y of Consumer Financial Information and Safeguarding Customer Information (2024 amendments) (United States (Federal))\n\nSource: https://www.federal register.gov/documents/2024/06/03/2024-11116/regulation-s-p-privacy-of-con sumer-financial-information-and-safeguarding-customer-information\n\nhttps ://rulebook.fru.dev/regulations/us-sec-reg-sp URL:https://rulebook.fru.dev/regulations/us-sec-reg-sp CATEGORIES:United States (Federal),financial,privacy,cybersecurity,breach-n otification TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-277@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20260415 DTEND;VALUE=DATE:20260416 SUMMARY:NYDFS Cybersecurity Regulation (Part 500): Annual compliance notifi cation DESCRIPTION:Annual certification or acknowledgment covering calendar year 2 025 due.\n\nNew York DFS Cybersecurity Requirements for Financial Services Companies (23 NYCRR Part 500)\, Second Amendment (New York)\n\nSource: ht tps://www.dfs.ny.gov/cybersecurity/23-NYCRR-Part-500\n\nhttps://rulebook.f ru.dev/regulations/us-ny-dfs-500 URL:https://rulebook.fru.dev/regulations/us-ny-dfs-500 CATEGORIES:New York,cybersecurity,breach-notification,financial TRANSP:TRANSPARENT END:VEVENT BEGIN:VEVENT UID:deadline-297@regulations.fru.dev DTSTAMP:20260924T132630Z DTSTART;VALUE=DATE:20260603 DTEND;VALUE=DATE:20260604 SUMMARY:SEC Regulation S-P: Smaller entities must comply DESCRIPTION:Smaller covered institutions (24 months after Federal Register publication) must comply with the amended Regulation S-P.\n\nRegulation S- P: Privacy of Consumer Financial Information and Safeguarding Customer Inf ormation (2024 amendments) (United States (Federal))\n\nSource: https://ww w.federalregister.gov/documents/2024/06/03/2024-11116/regulation-s-p-priva cy-of-consumer-financial-information-and-safeguarding-customer-information \n\nhttps://rulebook.fru.dev/regulations/us-sec-reg-sp URL:https://rulebook.fru.dev/regulations/us-sec-reg-sp CATEGORIES:United States (Federal),financial,privacy,cybersecurity,breach-n otification TRANSP:TRANSPARENT END:VEVENT END:VCALENDAR