New York's New Cybersecurity Regulations: The Good, The Bad And The Ugly - Security - United States: The first foray into comprehensive state regulation of business data protection practices, and arguably the most stringent, is New York's Cybersecurity Requirements for Financial Services Companies, to be found at 23 NYCRR 500.