NAIC Insurance Data Security Model Law
NAIC Model Law #668 · Read 2026-08-15
Model law adopted by the NAIC in 2017. It applies in a state only once that state enacts it; a growing number of states have done so.
Identifier
- Identifier
- NAIC Model Law #668
- Level
- State
- Status
- Phased
- Adopted
- 2017-10-24
- Applies from
- Not stated in the register
- Supervisory bodies
- NAIC
Named requirements
Information security program
Section 4
A written program based on a risk assessment, overseen by the board.
Investigation of a cybersecurity event
Section 5
Investigate promptly when a cybersecurity event may have occurred.
Notification to the commissioner
Section 6
Notify the insurance commissioner within 72 hours of determining a cybersecurity event.
Official source
EU acts on the same ground
- dora
DORA sets comparable ICT risk management and incident reporting duties for EU insurers and banks.
Change monitoring
The row is re-read against the publisher's own publication on a fixed interval. The dates below can be checked on the spot and travel with the API response.
| Field | Value |
|---|---|
| Register | NAIC, NAIC Model Law #668 |
| Publisher | National Association of Insurance Commissioners |
| Last read | 2026-08-15 |
| Interval | Every 30 days |
| Next re-read | 2026-09-14 |
| Status | Re-read scheduled |
Row history
Dated events concerning this exact row, newest first. No event appears here without a date in a primary source.
| Date | Event | Source |
|---|---|---|
| 2026-08-15 | Row read against the official publication | National Association of Insurance Commissioners |
| 2017-10-24 | Adopted under NAIC Model Law #668 | National Association of Insurance Commissioners |
Monitoring states when the row was checked, not how the legal position should be assessed.
Cite this row
The string below travels with a memo, a case file or an agent chain. The same string sits in the citation field of the API response.
NAIC Model Law #668, NAIC Insurance Data Security Model Law. NovaCopilot, https://legal.exploreworldai.com/us/regler/naic-insurance-data-security-model-law (hämtad 2026-10-12, bevis sha256:521cf20887ec1992, bygge legal-2026-10-12).
- sha256:
- 521cf20887ec1992a83f7e59eedf95dfd155b619980352a8f04058d665100270
- hämtad:
- 2026-10-12
- source_confidence:
- derived
- bygge:
- legal-2026-10-12
- officiell källa:
- https://content.naic.org/sites/default/files/model-law-668.pdf
Derived path to the publisher. The address is built from the identifier and lands in the publisher's own register. content.naic.org.
The row is a source reference with an official identifier. No legal advice and no compliance decision.
Verifiable trust signals
- Six fixed blocks, one source per line
- No sentence written by a language model
- Engine version and read date on every answer
- No customer data, no documents, no advice
- Model card and audit published under the EU AI Act