Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 20 APRIL 2021

Two Other States Adopt Model Data Security Law For Insurance Industry

Sheppard
Sheppard
Contributor
Sheppard

Sheppard

Businesses turn to Sheppard to deliver sophisticated counsel to help clients move ahead. With more...

View firm profile
Explore more from Sheppard

Maine and North Dakota recently adopted the National Association of Insurance Commissioners (NAIC) data security model law.

United StatesInsurance
Julia K. Kadish
Julia K. Kadish
Author LinkedIn connections

Maine and North Dakota recently adopted the National Association of Insurance Commissioners (NAIC) data security model law. They join at least 11 others states who have already adopted the model law.  The model law applies to insurers, insurance agents and other entities licensed by the state department of insurance.

As we wrote about in our insurance certifications round-up, among other requirements, the model law requires organizations subject to the law to have:

  • A comprehensive written information security program commensurate with the company's size and complexity
  • A written incident response plan
  • Employee training
  • Appropriate oversight by the company's board of directors

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

AI Regulation In Insurance: A Crossroads

As artificial intelligence development accelerates and safety concerns mount, state insurance regulators are advancing comprehensive examination frameworks to govern AI use in the insurance industry. The National Association of Insurance Commissioners nears completion of its AI Risk Evaluation Supplement, which will establish standardized oversight procedures for insurers' AI governance practices across market conduct and financial examinations.
United StatesInsurance
McDermott Will & Schulte
McDermott Will & Schulte
Article

Privacy, Cyber & Data Strategy Advisory | NAIC Summer Meeting Sharpens Focus On AI, Data, And Technology Governance

The National Association of Insurance Commissioners intensified its regulatory focus on artificial intelligence governance, third-party data models, and cybersecurity oversight at its Summer 2026 meeting. Regulators are shifting from principles-based guidance to examination-ready supervisory tools, emphasizing that insurers remain accountable for the technologies and vendors they deploy. The meeting revealed how AI risk evaluation, vendor oversight frameworks, and privacy modernization efforts are convergin
United StatesInsurance
Alston & Bird LLP
Alston & Bird LLP
Article

Don’t Try To Deny It: Federal Court Holds FCA Settlement Is Covered By Insurance

A federal court ruled that CNA must provide coverage for Guidehouse's $7.6 million False Claims Act settlement related to cybersecurity failures in New York's Emergency Rental Assistance Program portal. The decision addresses critical questions about when insurers can deny coverage for FCA settlements under professional liability policies, particularly regarding exclusions for fines, penalties, and deliberate acts.
United StatesInsurance
Crowell & Moring LLP
Crowell & Moring LLP
Article

US NAIC Summer 2026 National Meeting Highlights: Natural Catastrophe Risk And Resilience (EX) Task Force

The Natural Catastrophe Risk and Resilience Task Force of the US National Association of Insurance Commissioners convened to address the escalating challenges of catastrophe risks facing insurance markets. Key discussions centered on developing standardized mitigation programs, expanding flood insurance awareness, and scaling resilience initiatives like FORTIFIED home designations. The meeting also examined the evolving property/casualty reinsurance market and explored new hemispheric partnerships to streng
United StatesInsurance
Mayer Brown
Mayer Brown
Article

Is Your PFAS Coverage At Risk? An Ohio Federal Court Ruling Opens The Door To Broader Insurer Denials

A federal court in Ohio has ruled that an occupational disease exclusion in a commercial general liability policy bars coverage for PFAS-related personal injury claims brought by firefighters against a manufacturer of firefighting equipment. This landmark decision could significantly impact how insurers respond to PFAS product liability claims and may extend beyond occupational disease exclusions to other policy provisions using similarly broad language.
United StatesInsurance
Benesch, Friedlander, Coplan & Aronoff LLP
Benesch, Friedlander, Coplan & Aronoff LLP
Article

Agents Of Change: Amendments To Washington State Insurance Regulations Take Effect October 18

Washington's Insurance Commissioner has announced significant amendments to insurance claims handling regulations that will reshape how insurers investigate and process claims in the state. The changes, effective October 2026, introduce new requirements for mitigation approvals, investigation standards, and claimant communications that could substantially impact insurer operations and liability exposure. These regulatory updates come in response to a surge in consumer complaints and litigation, establishing
United StatesInsurance
Ballard Spahr LLP
Ballard Spahr LLP
Article

Contractual Liability Exclusion Must Be Assessed Against Each Cause Of Action Separately, Not Applied Wholesale Where Multiple Claims Are Pleaded In One Action

The Ninth Circuit Court of Appeals examined whether a directors' and officers' liability policy's contractual liability exclusion could bar coverage for an entire multi-count lawsuit, or whether each legally distinct cause of action—breach of contract, fraud, and quantum meruit—must be assessed separately against the exclusion's terms. The decision addresses the critical question of how insurers must apply policy exclusions when a single complaint pleads multiple claims arising from the same und
United StatesInsurance
Adams & Adams
Adams & Adams
Article

FDA Balances Peptide Policy With Enforcement Against Unlawful Peptide Sellers

Over the past year, industry has had a front row seat as the Food and Drug Administration (“FDA” or the “Agency”) decides just how much leeway it wants to afford the manufacture, marketing, and sale of peptide products, and just where it wants to draw the line. Despite the recent decision of FDA’s Pharmacy Compounding Advisory Committee (“PCAC”) to recommend a number of peptides for inclusion on the 503A bulks list process — a move that represents a potentially more permissive stance toward peptide regulation, at least in terms of what can and cannot be compounded under 503A...
United StatesFood, Drugs, Healthcare, Life Sciences
Sheppard
Sheppard
Article

The Ninth Circuit Affirms Dismissal Of DMCA CMI Removal Claim Against AI Code Generator – Output Is A New Work Not A Copy Of Training Data

There was a significant ruling in the Doe v. Github case involving training of AI code generator models on open source. The United States Court of Appeals for The Ninth Circuit affirmed the district court ruling dismissing part of an action brought under the Digital Millennium Copyright Act (“DMCA”) by programmers against GitHub, Inc., and other defendants. The issues centered on whether defendants removed copyright management information (CMI) from content used to train the AI code generator models.
United StatesIntellectual Property
Sheppard
Sheppard
Article

Massachusetts Issues Guidance On Data Center Development Under Executive Order 658

Massachusetts Governor Maura Healey has issued Executive Order 658, establishing comprehensive permitting and regulatory standards for data centers exceeding 25 MW of peak electricity demand. The Order mandates community benefits agreements, clean energy procurement protocols, and coordination across multiple state agencies to ensure responsible development that protects ratepayers, communities, and the environment. This action positions Massachusetts alongside other states implementing stricter oversight o
United StatesEnergy and Natural Resources
Sheppard
Sheppard
Article

Fintech Agrees To Acquire National Bank Partner For $590 Million

A publicly traded fintech company has announced a $590 million acquisition of its longtime national bank partner, marking a strategic shift from the traditional bank-partnership model to direct ownership of a national bank charter. The transaction, expected to close in the first half of 2027 pending regulatory approvals, would make the fintech a bank holding company while consolidating its banking activities and eliminating certain sponsor-bank fees. This deal represents a faster alternative to pursuing a d
United StatesFinance and Banking
Sheppard
Sheppard