On April 14, 2021, the U.S. Department of Labor (DOL) released three-part guidance on cybersecurity issues for employee benefit plans, marking its first significant commentary on the issue since its comprehensive but nonbinding report in late 2016.
The DOL’s guidance provides tips and best practices for ERISA plan sponsors, responsible fiduciaries, recordkeepers, service providers, and