Virginia House Bill 1334 (Prior Session Legislation)

Completed Legislative Action
Spectrum: Partisan Bill (Democrat 2-0)
Status: Passed on March 10 2020 - 100% progression
Action: 2020-03-10 - Governor: Acts of Assembly Chapter text (CHAP0264)
Text: Latest bill text (Chaptered) [HTML]

Summary

Insurance data security; required programs and notifications. Establishes standards for insurance data security and for the investigation of a cybersecurity event and the notification to the Commissioner of Insurance and affected consumers of a cybersecurity event. The bill requires insurers to develop, implement, and maintain a comprehensive written information security program based on an assessment of its risk and that contains administrative, technical, and physical safeguards for the protection of nonpublic information and its information system. The bill requires investigation of potential cybersecurity events and prescribes standards for such investigations. The bill requires that the notification of the occurrence of a cybersecurity event provided by an insurer or other entity to the Commissioner and affected consumers to include certain information prescribed by the bill. The bill requires the Commissioner to adopt rules and regulations regarding data security and authorizes the Commissioner to investigate potential violations.

Title

Insurance data security; required programs and notifications.

Sponsors

Roll Calls

History

Code Citations

Virginia State Sources