New York over the past few years has steadily raised the bar on privacy and cybersecurity standards for commercial enterprises, and, along with the European Union and California, is increasingly seen as a pacesetter in this fast-developing area of law. Proposed legislation before its General Assembly and Senate this year promises new obligations, while the New York Department of Financial Services has implemented its own cybersecurity regulations and continues to provide guidance to the financial institutions under its jurisdiction.