NYS hospital cybersecurity rule

In force since 2 Oct 2025.

1 official page · 3 Oct 2026

What it requires

  • Tell the department within 72 hours of finding a cybersecurity incident.
  • Have the systems tested by attack at least once a year.
  • Assess the risks to the hospital's information every year.

Who it applies to

New York hospitals.

The project that meets it

Sources

NYS hospital cybersecurity rule is in force.

David from SBK replies within one working day.