What US NAIC Insurance Data Security Model Law (#668) - Cybersecurity Program and Incident Response Requirements requires
The National Association of Insurance Commissioners (NAIC) Insurance Data Security Model Law (Model #668), enacted in 2017 and adopted by over 25 US states (including South Carolina, Michigan, Ohio, Connecticut, and New York's equivalent Cybersecurity Regulation 23 NYCRR 500), requires licensed insurers and producers to: establish and maintain a comprehensive written cybersecurity program based on risk assessment; implement administrative, technical, and physical safeguards for nonpublic information; maintain an incident response plan; conduct annual penetration testing and vulnerability assessments; and notify the state insurance commissioner within 72 hours of a cybersecurity event affecting 250+ consumers. Third-party service providers (TPSPs) must be contractually required to maintain equivalent security standards.
Pillar: Insurance & Risk · Authority: National Association of Insurance Commissioners (NAIC) · Version: 2.0.0 · Last updated:
Primary source: https://content.naic.org/sites/default/files/model-law-668.pdf
SHA-256 integrity: 9a10de054a54c5b756c90ca894e96930cafe898bb1c57bcf6114e9add8df991f
Primary Citations — 8 traced to source
- {"source":"NAIC Insurance Data Security Model Law #668 - Section 4: Cybersecurity Program and Risk Assessment Requirements","url":"https://content.naic.org/sites/default/files/model-law-668.pdf","type":"primary_legislation"}
- {"source":"NAIC Insurance Data Security Model Law #668 - Section 5: Investigation and Notification of a Cybersecurity Event (72-hour notification requirement)","url":"https://content.naic.org/sites/default/files/model-law-668.pdf","type":"primary_legislation"}
+ 6 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-naic-model-law-insurance-data-security.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-naic-model-law-insurance-data-security.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-naic-model-law-insurance-data-security
- Back to registry: Browse all 10,090 compliance nodes