Kentucky Insurance Data Security Law

KY Insurance Data Security
active

Kentucky's version of the NAIC Insurance Data Security Model Law. Covered insurance licensees must run a risk-based written information security program, oversee third-party service providers, investigate cybersecurity events, and report qualifying events to the Commissioner within three business days. Domestic insurers must certify compliance annually.

Jurisdiction

Kentucky

Jurisdiction Type

state

Country

United States

Effective Date

1/1/2023

Enforcing Authority

Kentucky Department of Insurance (Commissioner)

Fines Under This Regulation

0

Total Fine Amount (USD)

--