Director and Financial Institutions Audit and Accounting Committee Chair | Making the Technical Easier
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
As the insurance industry evolves, so do the risks associated with data security. With the implementation of the NAIC data security model law, state-specific #cybersecurity regulations are taking center stage, and it's time for #insurance companies to act.
CPPA Declines to Advance New Draft CCPA Regulations: The California Privacy Protection Agency (CPPA) Board met last week to discuss the latest updates on California Consumer Privacy Act (CCPA) draft regulations for cybersecurity audits, risk assessments, automated decision-making technology (ADMT), insurance companies, as well as updates to existing regulations. It was expected that the Board was going to approve these updates, but they instead postponed finalizing them.... By: Paul Hastings LLP #dataprotection #dataprivacy #privacy
A California insurance company is facing a proposed class action lawsuit filed yesterday in federal court for allegedly failing to protect the health and personal information of over 1.5 million customers from a cyberattack that occurred back in August. The plaintiff claims that the insurance company violated HIPAA and FTC rules by not adequately safeguarding sensitive information and delaying notification of the breach for five months. This case reminds me of the new PA law that went in to effect in December establishing cybersecurity regulations for insurance companies operating in the state -- the Pennsylvania Insurance Data Security Act. It requires all insurers, including certain small- and medium-sized insurers, to implement data security requirements including monitoring and reporting data breaches. Similar laws are in effect in at least a dozen other states. The requirements of the law are seem like Cybersecurity 101 to me and very similar to Safeguards Rule requirements applicable to financial businesses, but perhaps a good starting point for other business types as well: ✔ build an information security program ✔ conduct risk assessments ✔ keep up with changes in tech environment ✔ incident response plan ✔ notification of cybersecurity events ✔ engage in corporate oversight ✔ vendor management/due diligence #PIDSA #cybersecurityawareness #insuranceindustry