Bill > SB1919

This bill creates the Insurance Data Security Act, which requires licensed insurers in Oklahoma to develop and maintain a comprehensive information security program to protect the confidentiality, integrity, and availability of nonpublic information and their information systems. The bill defines key terms, outlines the required components of the information security program, establishes incident response and notification requirements, gives the Insurance Commissioner authority to examine and investigate insurers, and provides confidentiality protections for information shared with the Commissioner. The bill includes some exceptions and enforcement provisions, and specifies that it takes precedence over other state laws related to data security and cybersecurity events.