Salvatore Scanio’s Article on the NAIC Insurance Data Security Model Law Published by ABA’s Cybersecurity and Data Privacy Committee

Salvatore Scanio’s article, NAIC Insurance Data Security Model Law: Key Provisions and Adoption to Date, was recently published by the American Bar Association, Tort Trial & Insurance Practice Section, Cybersecurity and Data Privacy Committee (Winter 2021). The NAIC Model, issued in October 2017, generally requires insurers, agents, and other entities licensed by a state department of insurance to develop, implement, and maintain an information security program, investigate any cybersecurity events, and notify the state insurance commissioner of such events. Eleven states, including three in 2020, have adopted the NAIC Model.