Insurance Data Security Act

Iowa Insurance Data Security Act
active

Iowa's version of the NAIC Insurance Data Security Model Law requires insurance licensees to run a risk-based written information security program, oversee third-party service providers, investigate cybersecurity events, and report qualifying events to the Insurance Commissioner within three business days. Consumer notice follows the general breach law in chapter 715C.

Jurisdiction

Iowa

Jurisdiction Type

state

Country

United States

Effective Date

1/1/2022

Enforcing Authority

Iowa Commissioner of Insurance (Iowa Insurance Division)

Fines Under This Regulation

0

Total Fine Amount (USD)

--