This article was originally published in Corporate Compliance Insights, February 2024
Companies may find existing systems need augmenting to meet new rules
Recent amendments to the New York Department of Financial Services 23 NYCRR Part 500, which more than a half-decade ago transformed cybersecurity compliance for thousands of insurance, financial services and healthcare organizations, threaten to shake things up again by adding new requirements. Joseph Shepley of Alvarez & Marsal offers guidance to CISOs at covered organizations.
The New York Department of Financial Services’ 23 NYCRR Part 500 has been a part of the compliance landscape for insurance, financial services and healthcare organizations since 2017. Part 500 has transformed the cybersecurity posture of these covered entities, benefiting consumers, employees and other data subjects whose personal data organizations process.
While all the recent amendments to Part 500 have been the subject of considerable discussion, the changes to Section 500.13 will likely have the biggest weight, governing how covered entities manage (and dispose) of their non-public information (NPI) so they can remain Part 500 compliant.
Click the button below to read the full article and learn more about Part 500 compliance.
Read the Full Article Here
Clone of Disclosure Pilot Scheme: The Inside View
April 29, 2025
The Disclosure Pilot Scheme (DPS) was designed to mitigate some of the “excessive costs, scale and complexity” experienced by parties under the previous set of standards for disclosure. With only months to go on the DPS, A&M surveyed 250 senior lawyers to gauge their views on the process and what improvements can be made.
Integrating AI Into NSW Expert Reports: A Cautious and Conservative Approach
February 25, 2025
A&M's Daniel Heywood and Stephanie Loccisano explore New South Wales' groundbreaking Practice Note SC Gen 23, which introduces comprehensive rules and disclosure requirements for generative AI use in courts, setting a global standard for balancing innovation and legal integrity.
Updating your dawn raid playbook with AI
November 14, 2024
Unannounced on-site inspections by competition authorities, or dawn raids, have been increasing in number and scope across Europe and the U.K.. 2023 saw the highest number of dawn raids in these regions in six years. Data from the first half of 2024 indicates this trend is only continuing.
Risk and Reward: The Role of AI in Construction Disputes
November 11, 2024
Time is of the essence when it comes to the role of an expert in a construction dispute. With cases increasingly involving vast amounts of data, AI has become a formidable tool for these experts, significantly improving the efficiency of data analysis.
