Bill > H0147

This bill adds a new chapter to existing Idaho law to establish the Insurance Data Security Act. The key provisions of the bill include: - Requiring insurance companies and other insurance licensees to develop, implement, and maintain a comprehensive written information security program based on a risk assessment to protect the security and confidentiality of nonpublic information and the licensee's information systems. - Mandating that licensees investigate, respond to, and notify the state insurance director of any cybersecurity events that compromise nonpublic information or the licensee's operations. - Granting the state insurance director the power to examine and investigate licensees for compliance with the new requirements. - Establishing confidentiality protections for information submitted to the insurance department under the new law. - Providing exceptions to the requirements for smaller insurance companies and those already subject to similar federal information security regulations. The bill aims to establish consistent state-level standards for insurance data security to protect consumers and the insurance industry in Idaho.

Business and Industry, Justice

Business Committee (House)

https://legislature.idaho.gov/sessioninfo/2021/legislation/H0147/