The Connecticut Insurance Data Security Law goes into effect on October 1, 2020.
Licensed insurance companies, and any other companies otherwise authorized to operate pursuant to the insurance laws of Connecticut, should be aware of and follow the Law.
The Act establishes standards applicable to licensees of the Connecticut Insurance Department for data security, the investigation of a cybersecurity event, and notification to the Department of such event.
The law includes key elements like as:
-The performance of regular risk assessments
-The designation of a responsible employee, such as a chief information security officer-
The maintenance of an information security program that is ‘commensurate’ with the size and complexity of the licensee’s operations and the nature of its activities
Connecticut’s Insurance Department issued a Bulletin on July 20, 2020 (Please see https://portal.ct.gov/-/media/CID/1_Bulletins/Bulletin-IC-42.pdf)
Emerging Risk is an advisory, consulting and technology company that provides best in services and cost effective solutions to manage enterprise risk including Privacy and Compliance #cybersecurity #data #connecticut #privacy #insurance