SEARCH SITE

VIRGINIA LAW PORTAL

SEARCHABLE DATABASES

ACROSS SESSIONS

Developed and maintained by the Division of Legislative Automated Systems.

2020 SESSION

  • | print version

HB 1334 Insurance data security; required programs and notifications.

Introduced by: Mark L. Keam | all patrons    ...    notes | add to my profiles

SUMMARY AS PASSED HOUSE: (all summaries)

Insurance data security; required programs and notifications. Establishes standards for insurance data security and for the investigation of a cybersecurity event and the notification to the Commissioner of Insurance and affected consumers of a cybersecurity event. The bill requires insurers to develop, implement, and maintain a comprehensive written information security program based on an assessment of its risk and that contains administrative, technical, and physical safeguards for the protection of nonpublic information and its information system. The bill requires investigation of potential cybersecurity events and prescribes standards for such investigations. The bill requires that the notification of the occurrence of a cybersecurity event provided by an insurer or other entity to the Commissioner and affected consumers to include certain information prescribed by the bill. The bill requires the Commissioner to adopt rules and regulations regarding data security and authorizes the Commissioner to investigate potential violations.


FULL TEXT

AMENDMENTS

HISTORY