Insurance Information and Privacy Protection Act and Insurance Data Security Act

Virginia's insurance privacy law limits pretext interviews, requires notices of information practices, gives consumers access and correction rights and reasons for adverse underwriting decisions, and restricts disclosure of medical and privileged information without written authorization. The 2020 Insurance Data Security Act adds a written information security program, cybersecurity-event investigation, notice to the Commissioner within three business days, and consumer breach notice.