New York State regulator flags “significant concerns,” proposes guidance