State Regulator Subpoenas Company After Data Breach. What your Clients Need to Know.

The State:  New York

The regulator:  New York’s Department of Financial Services

The Subpoena: Seeks more information about Equifax’s data breach, including:

  • details on when Equifax learned of the breach
  • details on what actions Equifax took after the breach was discovered

More regulatory enforcement in the works? Yes, New York also wants to impose the financial data security rules it finalized this year to apply to credit reporting agencies like Equifax.

What does this mean for other states? Colorado followed in New York’s footsteps to become the 2nd state to impose specific data security requirement son the financial industry. Look for a specific application to credit reporting agencies forthwith

Reuters | New York regulator subpoenas Equifax over massive data breach: Report

New York Law Journal | NY Issues Subpoena to Equifax Over Breach, Vullo Confirms