Bill > HB974

This bill establishes two main sets of provisions: the Insurance Data Security Act and the Peer-to-Peer Car-Sharing Program Act. Under the Insurance Data Security Act, insurance companies (licensees) are required to develop and maintain comprehensive written information security programs to protect nonpublic consumer information from cybersecurity events. The act mandates that these programs include risk assessments, administrative and technical safeguards, employee training, and incident response plans. In the event of a cybersecurity event, licensees must conduct a prompt investigation and notify the state director within four business days if the event potentially impacts a significant number of consumers or could materially harm the company's operations. The act also provides detailed requirements for investigating, documenting, and responding to cybersecurity incidents, with specific provisions for third-party service providers. The Peer-to-Peer Car-Sharing Program Act establishes insurance and liability guidelines for platforms that enable vehicle owners to rent their vehicles to other drivers, including requirements for insurance coverage, driver verification, vehicle safety, and disclosure of terms to both vehicle owners and drivers. The bill includes exemptions for certain small businesses and sets the effective date for these provisions as January 1, 2026, with some implementation deadlines extending to 2028.

Budget and Finance, Business and Industry, Government Affairs

https://house.mo.gov/Bill.aspx?bill=HB974&year=2025&code=R