New York policy
NY Hospital Cybersecurity Regulation (10 NYCRR 405.46)
Regulation · adopted 2024; effective Oct 2025
- Jurisdiction
- New York State
- Applies to
- General hospitals licensed under Article 28
- Effective
- adopted 2024; effective Oct 2025
What it requires
Requires hospital cybersecurity programs, CISO designation, and 72-hour incident reporting to DOH
cybersecurityhealthregulationny-statenypolicy
Free account
Create a free account
Track New York policy and save searches across the Network. Free. No card required.
Want to turn policy like this into market and network moves? Build your Market Network Strategic Plan →
