NY| ELANY Bulletin 2026-06 reminds all New York licensed excess lines brokers (resident and nonresident) that their DFS Cybersecurity Regulation certification filing for calendar year 2025 is due by April 15, 2026, and they must determine whether they are required to file based on any exemptions claimed under Section 500.19, file either a Certificate of Compliance (if in material compliance with all applicable cybersecurity requirements) or an Acknowledgment of Noncompliance (if they were not, including identifying noncompliant sections, describing issues, and providing remediation status or timelines), submit the filing via the DFS online portal with signatures from the highest-ranking executive and the CISO or senior cybersecurity officer, and retain all supporting records and remediation documentation for five years for possible DFS review.