Talking Points. Model Data Security Legislation for Insurance Companies

Which states have adopted this model data security code?

• Michigan
• Ohio
• Mississippi
• Alabama
• South Carolina
• Delaware
• Connecticut
• New Hampshire

What does the model legislation do?

• applies to insurers and other entities licensed by the department of insurance
• requires the development, implementation and maintenance of an information security program
• requires investigation of any cybersecurity events
• requires notification to the state insurance commissioner of data breaches

The NAIC Insurance Data Security Model Law