Legal sources with official primary sources

Printed ·

SMLM Previewerrors, bugs and incomplete coverage may occurThe model is production-ready during Q4-26

Skip to main content
Skip to the answer

All US rules

NAIC Insurance Data Security Model Law

NAIC Model Law #668 · Read 2026-08-15

Model law adopted by the NAIC in 2017. It applies in a state only once that state enacts it; a growing number of states have done so.

Identifier

Identifier
NAIC Model Law #668
Level
State
Status
Phased
Adopted
2017-10-24
Applies from
Not stated in the register
Supervisory bodies
NAIC

Named requirements

  • Information security program

    Section 4

    A written program based on a risk assessment, overseen by the board.

  • Investigation of a cybersecurity event

    Section 5

    Investigate promptly when a cybersecurity event may have occurred.

  • Notification to the commissioner

    Section 6

    Notify the insurance commissioner within 72 hours of determining a cybersecurity event.

Official source

EU acts on the same ground

  • dora

    DORA sets comparable ICT risk management and incident reporting duties for EU insurers and banks.

Change monitoring

The row is re-read against the publisher's own publication on a fixed interval. The dates below can be checked on the spot and travel with the API response.

Change monitoring
FieldValue
RegisterNAIC, NAIC Model Law #668
PublisherNational Association of Insurance Commissioners
Last read2026-08-15
IntervalEvery 30 days
Next re-read2026-09-14
StatusRe-read scheduled
Open the register at the publisher

Row history

Dated events concerning this exact row, newest first. No event appears here without a date in a primary source.

Row history
DateEventSource
2026-08-15Row read against the official publicationNational Association of Insurance Commissioners
2017-10-24Adopted under NAIC Model Law #668National Association of Insurance Commissioners

Monitoring states when the row was checked, not how the legal position should be assessed.

The string below travels with a memo, a case file or an agent chain. The same string sits in the citation field of the API response.

NAIC Model Law #668, NAIC Insurance Data Security Model Law. NovaCopilot, https://legal.exploreworldai.com/us/regler/naic-insurance-data-security-model-law (hämtad 2026-10-12, bevis sha256:521cf20887ec1992, bygge legal-2026-10-12).

sha256:
521cf20887ec1992a83f7e59eedf95dfd155b619980352a8f04058d665100270
hämtad:
2026-10-12
source_confidence:
derived
bygge:
legal-2026-10-12

Derived path to the publisher. The address is built from the identifier and lands in the publisher's own register. content.naic.org.

The row is a source reference with an official identifier. No legal advice and no compliance decision.

Verifiable trust signals

  • Six fixed blocks, one source per line
  • No sentence written by a language model
  • Engine version and read date on every answer
  • No customer data, no documents, no advice
  • Model card and audit published under the EU AI Act

Model cardAudit