Legal sources with official primary sources

Printed ·

SMLM Previewerrors, bugs and incomplete coverage may occurThe model is production-ready during Q4-26

Skip to main content
Skip to the answer
NovaCopilotA service from ExploreWorldAI

Source status and reading dates are reported separately. A reading date is not source verification.

All US rules

NAIC Insurance Data Security Model Law

NAIC Model Law #668 · Read 2026-08-15

Model law adopted by the NAIC in 2017. It applies in a state only once that state enacts it; a growing number of states have done so.

Identifier

Identifier
NAIC Model Law #668
Level
State
Status
Phased
Adopted
2017-10-24
Applies from
Not stated in the register
Supervisory bodies
NAIC

Named requirements

  • Information security program

    Section 4

    A written program based on a risk assessment, overseen by the board.

  • Investigation of a cybersecurity event

    Section 5

    Investigate promptly when a cybersecurity event may have occurred.

  • Notification to the commissioner

    Section 6

    Notify the insurance commissioner within 72 hours of determining a cybersecurity event.

Official source

EU acts on the same ground

  • dora

    DORA sets comparable ICT risk management and incident reporting duties for EU insurers and banks.

Change monitoring

The row is re-read against the publisher's own publication on a fixed interval. The dates below can be checked on the spot and travel with the API response.

Change monitoring
FieldValue
RegisterNAIC, NAIC Model Law #668
PublisherNational Association of Insurance Commissioners
Last read2026-08-15
IntervalEvery 30 days
Next re-read2026-09-14
StatusRe-read overdue
Open the register at the publisher

Row history

Dated events concerning this exact row, newest first. No event appears here without a date in a primary source.

Row history
DateEventSource
2026-08-15Row read against the official publicationNational Association of Insurance Commissioners
2017-10-24Adopted under NAIC Model Law #668National Association of Insurance Commissioners

Monitoring states when the row was checked, not how the legal position should be assessed.

Cite this row

The string below travels with a memo, a case file or an agent chain. The same string sits in the citation field of the API response.

NAIC Model Law #668, NAIC Insurance Data Security Model Law. NovaCopilot, https://legal.exploreworldai.com/us/regler/naic-insurance-data-security-model-law (hämtad 2026-10-25, bevis sha256:517e931a45af266f, bygge legal-2026-10-25).

Machine addressHow to cite the platform
sha256:
517e931a45af266f67c906206b4928660fe973ebb2bfe5ab98b1d3bebf5642ce
hämtad:
2026-10-25
source_confidence:
derived
bygge:
legal-2026-10-25
officiell källa:
https://content.naic.org/sites/default/files/model-law-668.pdf

Derived path to the publisher. The address is built from the identifier and lands in the publisher's own register. content.naic.org.

The row is a source reference with an official identifier. No legal advice and no compliance decision.

Verifiable trust signals

  • Source-linked answers and explicit evidence gaps
  • Obligations, controls, risks and consequences
  • Stable objects and verifiable checksums
  • Rule-based objects, optional source-linked reasoning
  • Model card, source status and audit

Model cardAudit