Chapter 27 - INSURANCE DATA SECURITY
- Section 27-2-27-1 - Applicability of chapter
- Section 27-2-27-2 - "Authorized individual"
- Section 27-2-27-3 - "Commissioner"
- Section 27-2-27-4 - "Consumer"
- Section 27-2-27-5 - "Cybersecurity event"
- Section 27-2-27-6 - "Department"
- Section 27-2-27-7 - "Encrypted"
- Section 27-2-27-8 - "Information security program"
- Section 27-2-27-9 - "Information system"
- Section 27-2-27-10 - "Licensee"
- Section 27-2-27-11 - "Multi-factor authentication"
- Section 27-2-27-12 - "Nonpublic information"
- Section 27-2-27-13 - "Publicly available information"
- Section 27-2-27-14 - "Risk assessment"
- Section 27-2-27-15 - "Third party service provider"
- Section 27-2-27-16 - Information security program; requirements
- Section 27-2-27-17 - Risk assessment; requirements
- Section 27-2-27-18 - Actions required based on risk assessment results
- Section 27-2-27-19 - Board of directors; executive management
- Section 27-2-27-20 - Incident response plan
- Section 27-2-27-21 - Investigation of cybersecurity event
- Section 27-2-27-22 - Notice to ceding insurers and commissioner of cybersecurity event
- Section 27-2-27-23 - Notice to producers of cybersecurity event
- Section 27-2-27-24 - Powers of commissioner
- Section 27-2-27-25 - Confidentiality
- Section 27-2-27-26 - Exemptions from chapter
- Section 27-2-27-27 - Suspension; revocation
- Section 27-2-27-28 - Rules
- Section 27-2-27-29 - Private right of action
- Section 27-2-27-30 - Exclusivity
- Section 27-2-27-31 - Financial institutions
- Section 27-2-27-32 - Affirmative defense