Steven Puiszis Discusses New York's Proposed Cybersecurity Rules for Banks and Insurers

November 16, 2015

Steven M. Puiszis — Deputy General Counsel and Privacy and Security Officer at of Hinshaw & Culbertson LLP — was quoted in the Law360 article, "NY Cybersecurity Rules Expand Banks' Compliance Woes." The piece, published on November 16, 2015, discusses the New York Superintendent of Financial Service's proposed cybersecurity rules for banks and insurers designed to protect information technology systems and customer account information.

While many who follow these issues closely agree that a rules-and-compliance approach may enhance overall cybersecurity, some, such as Mr. Puiszis, caution that banks and insurers should take a broader approach in effectively protecting against data breaches. As he notes in the article, "[w]hile a compliance approach is better than nothing at all, the problem is that compliance is not security[.] There's a lot to security that people don't think about, and if all they are doing is focusing on compliance, they are missing some important [issues]."

Read the full article, "NY Cybersecurity Rules Expand Banks' Compliance Woes" on the Law 360 website.

Hinshaw & Culbertson LLP is a U.S.-based law firm with offices nationwide. The firm's national reputation spans the insurance industry, the financial services sector, professional services, and other highly regulated industries. Hinshaw provides holistic legal solutions—from litigation and dispute resolution, and business advisory and transactional services, to regulatory compliance—for clients of all sizes. Visit for more information and follow @Hinshaw on LinkedIn and X.