What NAIC Insurance Data Security Model Law (Model No. 668) - Information Security Program, Risk Assessment, Third-Party Oversight, Cybersecurity Event Notification, and Annual Certification requires
Requires all licensed insurers, reinsurers, and other covered financial institutions operating in the U.S. insurance sector to implement a comprehensive information security program based on risk assessment, including written safeguards, third-party provider oversight, incident response planning, and mandatory 72-hour notification to the state insurance commissioner following a cybersecurity event as defined in Section 7. Applies to licensees under state insurance law adopting the model.
Pillar: Insurance & Risk · Authority: National Association of Insurance Commissioners (NAIC) · Version: 1.0.0 · Last updated:
Primary source: https://content.naic.org/sites/default/files/model-law-668.pdf
SHA-256 integrity: 0636a4a80cd1b261558a925219f86995691c2094cb1a33db49586bd6abd04d19
Primary Citations — 5 traced to source
- NAIC Insurance Data Security Model Law, https://content.naic.org/sites/default/files/model-law-668.pdf, Section 4, 2017
- NAIC Insurance Data Security Model Law, https://content.naic.org/sites/default/files/model-law-668.pdf, Section 5, 2017
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/naic-model-act-data-security-insurance-2017.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/naic-model-act-data-security-insurance-2017.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/naic-model-act-data-security-insurance-2017
- Back to registry: Browse all 10,099 compliance nodes