Those individuals who hold a New York state insurance license (covered entities), including nonresident licensees, have until Tuesday, April 15, 2025, to certify their compliance with the requirements of New York state’s cyber security regulation (23 NYCRR 500) for calendar-year 2024.
This filing requirement is for all licensees not covered by another covered entity’s information system. This certification, which is required annually, must be filed via the New York State Department of Financial Services’ web portal between Jan. 1, 2025, and Tuesday, April 15, 2025.
Before you access the web portal, take a minute to review Certification of compliance: a guide for details on your filing requirements. PIA offers step-by-step guides for submitting your certification of compliance, amending an existing limited exemption, or submitting a new limited exemption based on your specific circumstances. If you have any questions or require additional information, contact PIA’s Industry Resource Center.
Want to learn more about the recent changes?
PIA has developed a resource kit, Everything you need to know about the New York State Department of Financial Services’ cyber security requirements for financial services companies but were afraid to ask—23 NYCRR 500, which offers an in-depth review of the latest cyber security changes, and also offers a series of articles available on PIA Northeast News & Media.
The Break
PIA’s Director of Government & Industry Affairs Bradford J. Lachut, Esq., walks you through the process of the certification of compliance in the short video below.
Additional resources
For more information on the cyber security regulation, access the cyber security section of PIA’s Privacy Compliance Central tool kit, which offers numerous resources including the Ask PIA Cyber security FAQs. Be sure to watch your PIA Northeast News & Media for more information on other upcoming cyber-related deadlines.

Bradford J. Lachut, Esq.
Bradford J. Lachut, Esq., joined PIA as government affairs counsel for the Government & Industry Affairs Department in 2012 and then, after a four-month leave, he returned to the association in 2018 as director of government & industry affairs responsible for all legal, government relations and insurance industry liaison programs for the five state associations. Prior to PIA, Brad worked as an attorney for Steven J. Baum PC, in Amherst, and as an associate attorney for the law office of James Morris in Buffalo. He also spent time serving as senior manager of government affairs as the Buffalo Niagara Partnership, a chamber of commerce serving the Buffalo, N.Y., region, his hometown. He received his juris doctorate from Buffalo Law School and his Bachelor of Science degree in Government and Politics from Utica College, Utica, N.Y. Brad is an active Mason and Shriner.