On Aug. 17, the National Association of Insurance Commissioners Cybersecurity Task Force published a revised draft Insurance Data Security Model Law for public comment, Lexology reports. This version updates the April publication, which received more than 40 public comments, a Spring National Meeting discussion, and a two-day interim meeting, the report states. While the purpose of the model law is ultimately to “establish exclusive standards … for data security and investigation and notification of a data breach,” this revised version covered or enriched coverage on topics like encryption and consumer rights before, after, and during a breach. However, this version of the Model Law did not discuss subjects like “the timing and content of breach notifications” or how to meet revised information security program documentation requirements, the report states. Editor’s Note: The IAPP will be hosting a conversation on cyberinsurance at the Privacy. Security. Risk. conference from Sept. 13-16 in San Jose, California.
Full Story