# Northeast Regulators Increase Compliance Scrutiny

A proposed New York City bill could create a private right of action for a broad range of consumer-protection violations. Separately, enforcement actions in New York and Connecticut are drawing attention to cybersecurity vendor oversight and financial institutions’ Bank Secrecy Act/anti-money laundering (BSA/AML) controls. No procurement solicitation or award is identified, but contractors serving regulated organizations may face increased scrutiny of the security and compliance practices supporting their services.

- Contractors providing IT management, cybersecurity, debt collection, or financial-compliance services should review contractual security obligations, incident-response readiness, and relevant compliance controls, as recommended in the source signal.
- The proposed bill is not described as enacted; organizations should distinguish the potential private right of action from the existing enforcement actions when assessing legal and contractual exposure.
- Procurement teams may find it useful to account for vendor oversight and BSA/AML controls when evaluating service providers to regulated organizations.

**Jurisdictions:** sled
**Industries:** Information Technology
**Topics:** Regulatory Compliance, Cybersecurity
**Published:** October 20, 2026

### Government Entities
- New York City Department of Consumer and Worker Protection (DCWP)
- New York City Council
- New York Attorney General
- Connecticut Attorney General
- New York State Department of Financial Services (DFS)

### Sources
- [Northeast Regulators Focus on Consumer Protection, Cybersecurity, and Financial Services Compliance | Hudson Cook, LLP - JDSupra](https://www.jdsupra.com/legalnews/northeast-regulators-focus-on-consumer-6439986) - JD Supra