New York
08 March 2017
Reporter: Becky Butcher

Captives ‘exempt’ from New York cyber rules


Captive insurance companies are ‘exempt’ from the new cyber security regulation that came into effect in New York on 1 March.

The new regulation requires financial institutions to implement robust controls to detect, prevent and report cyber incidents.

As well as captive insurance companies, other ​exempt entities include small covered entities, designees covered by another, and those that do not possess or handle non-public information.

​All exempt entities must still file a certificate of exemption with the New York State Department of Financial Services (NYDFS) within 30 days.

According to Romaine Marshall and Matt Sorensen of law firm Holland & Hart, the impact of the new regulation will be “felt far beyond the state of New York and will likely become the baseline standard for the industry”.

The new regulation requires banks, insurance companies, and other financial services institutions regulated by the NYDFS to establish and maintain cyber security programmes designed to protect consumers’ private data and ensure industry safety.

Requirements include conducting periodic risk assessments, maintaining a cyber security programme based on the risk assessment, complying with governance and staffing requirements, and providing regular cyber security awareness training.

Marshall and Sorensen suggested that although the regulation became effective on 1 March, there will be a transition period of between one and two years for most financial institutions to comply.

“Full compliance with such an expansive regulation will [still] be challenging,” they added.

More news
The latest news from Captive Insurance Times
Join Our Newsletter

Sign up today and never
miss the latest news or an issue again

Subscribe now
R&Q completes assignment of deductible liabilities
21 September 2017 | London | Reporter: Jenna Lomax
The liabilities relate to workers’ compensation policies issued between 1988 and 2012 to a US corporate from a large US carrier
A.M. Best affirms Eni’s captive ratings
21 September 2017 | London | Reporter: Becky Butcher
A.M. Best has affirmed the financial strength rating of “A (Excellent)” and the long-term issuer credit of “a” of Eni Insurance Designated Activity Company (EID), a captive of Eni, a multinational oil and gas company based in Italy
ConocoPhillips captive ratings affirmed ‘excellent’
21 September 2017 | Oldwick | Reporter: Becky Butcher
A.M. Best has affirmed the financial strength rating of “A (Excellent)” and long-term issued credit rating of “a” of Sooner Insurance Company (Sooner), the captive insurer of ConocoPhillips
GFSC addresses Solvency II and IAIS capital standards project
20 September 2017 | St Peter Port | Reporter: Becky Butcher
The Guernsey Financial Services Commission (GFSC) has launched a discussion paper seeking the industry’s feedback on the evolution of the island’s global and European insurance capital standards
NCCIA clarifies 831(b) memo
20 September 2017 | Charlotte | Reporter: Becky Butcher
The North Carolina Captive Insurance Association has issued a statement to clarify a memo discussing the 831(b) tax election and the impact on the state’s captive insurance industry should Congress repeal the election
XL Group selects Dublin as post-Brexit location
20 September 2017 | London | Reporter: Becky Butcher
XL Group has revealed its plans to move its principal EU insurance company, XL Insurance Company, from the UK to Ireland in 2018, in response to Brexit
R&Q completes novation from Cayman captive
20 September 2017 | Cayman Islands | Reporter: Becky Butcher
Randall & Quilter (R&Q) Holdings has completed the novation of reinsurance policies issued between 2006 and 2011 from a Cayman domiciled group captive