What does the new NY State Financial Services Department Regulation (23 NYCRR 500) have to do with HIPAA? These two laws have very similar cybersecurity requirements for Covered Entities. Most importantly, this law applies to everyone doing business in New York. Even if your business is exempt, you must file an exemption by April 15, 2020. Read the full report here.