Skip to content
Insurance Pass
Start Free
NAIC model law · NAIC model laws

Insurance Data Security Model Law

Publisher
National Association of Insurance Commissioners
Edition
NAIC Model Laws, Regulations, Guidelines and Other Resources, 4th Quarter 2017
Last checked
2026-09-08
Status
NAIC model, © NAIC. Brief quotations under fair use
Edition and licensing notes

Publisher. National Association of Insurance Commissioners (NAIC)

Status. NAIC model, © NAIC. Brief quotations under fair use; not the enacted law of any state until adopted.

What this document is

Insurance Data Security Model Law is a naic model law published by National Association of Insurance Commissioners (NAIC). It is one of the documents that insurance license exam questions are written from, including life & health practice questions. This page summarizes it and points to the official version, which is the text to rely on.

Sections cited in practice questions

Each practice answer shows the exact passage it comes from. These are sections of this document that questions cite, with a short excerpt from the source text.

  • Section 4B
    “A Licensee’s Information Security Program shall be designed to: (1) Protect the security and confidentiality of Nonpublic Information and the security of the Information System; (2) Protect against any threats or hazards to the security or integrity of Nonpublic Information and the Information...”
  • Section 5A
    “A. If the Licensee learns that a Cybersecurity Event has or may have occurred the Licensee or an outside vendor and/or service provider designated to act on behalf of the Licensee, shall conduct a prompt investigation.”
  • Section 6D
    “D. Notice Regarding Cybersecurity Events of Third-Party Service Providers (1) In the case of a Cybersecurity Event in a system maintained by a Third-Party Service Provider, of which the Licensee has become aware, the Licensee shall treat such event as it would under Section 6A. (2) The computation...”
  • Section 9A(3)
    “(3) An employee, agent, representative or designee of a Licensee, who is also a Licensee, is exempt from Section 4 and need not develop its own Information Security Program to the extent that the employee, agent, representative or designee is covered by the Information Security Program of the other Licensee.”

Practice this material

Questions about this source

Insurance Data Security Model Law is a naic model law published by National Association of Insurance Commissioners (NAIC). Edition: NAIC Model Laws, Regulations, Guidelines and Other Resources, 4th Quarter 2017.

No. This page summarizes the document and links to the official version. Always rely on the text published by National Association of Insurance Commissioners (NAIC) for the current law.

Practice questions for Life & Health cite this document.

More NAIC model laws sources

See all NAIC model laws sources →