| 1 minute read

2025 New York Department of Financial Services (NYDFS) Reporting Reminder

New York State seal

The team at Avalon just wanted to remind you that the New York Department of Financial Services (NYDFS) cybersecurity regulation deadline is fast approaching. As part of NY DFS Cybersecurity Regulation 23 NYCRR 500, companies regulated by NYDFS are required to complete and file their annual cybersecurity compliance certification with the department.

Deadline: The filing deadline for the Notice of Compliance is April 15, 2025.

Key points to remember:

  • Ensure your cybersecurity program complies with the requirements outlined in 23 NYCRR 500.
  • If you are not fully compliant with each section, you are still required to submit a notice of material non-compliance with associated remediation timelines.
  • Complete and file the Notice of Compliance by the deadline.
  • Review your risk assessments, incident response plans, and cybersecurity policies to ensure they are up to date.

Please take action promptly to avoid penalties and ensure full compliance. If you need assistance or have questions regarding the filing process, contact the experts at Avalon today.

Blog Articles

7 Common Missteps in Preserving Digital Evidence

Digital evidence is fragile. It changes, syncs, expires, gets overwritten, and often disappears before anyone realizes it matters. For law firms and corporate legal departments, the goal is not just to save data. The goal is to preserve the right data, in the right way, with the right documentation. That’s why our experts created this quick data preservation guide for legal teams, corporate counsel, and litigation support professionals.

What to Expect During a Relativity Server to RelativityOne Migration

In a recent blog, “Why Your Move from Relativity Server to RelativityOne Should Start Now," we discussed the need for organizations to move from Relativity Server to RelativityOne.

The Next Generation of AI in Law*

The legal industry is steadily moving beyond early experimentation with generative AI and into a more complex phase defined by agentic systems. These systems do not simply generate text or assist with discrete tasks. They are designed to take action, to carry out multi-step processes, and to operate with a level of autonomy that begins to resemble participation rather than assistance.