Insurance Data Security Act

Delaware's version of the NAIC model law requires insurance licensees to run a written, risk-based information security program, investigate cybersecurity events, and notify the Insurance Commissioner within 3 business days and affected consumers within 60 days. Domestic insurers must certify compliance to the Commissioner each year.