With respect to cybersecurity, NYDFS stated that Robinhood's cybersecurity program did not fully address Robinhood's operational risks and specific policies within the program were not in full compliance with several provisions of the Department's Cybersecurity Rules. In addition to the penalty, Robinhood will also be required, as part of the settlement, to retain an independent consultant that will perform a comprehensive evaluation of Robinhood's compliance with the Department's regulations and its remediation efforts with the specifically identified deficiencies and violations. INTERNATIONAL LAWS & REGULATIONS China Issues Rules for Use of Certification for Cross-Border Data Transfer Mechanism China's National Information Security Standardization Technical Committee issued "Technical Specifications for the Certification of Cross-Border Processing of Personal Information."