Remove Definition Remove Financial Services Remove Insurance Remove Training
article thumbnail

Vermont Enacts Insurance Data Security Law

Hunton Privacy

515 , making Vermont the twenty-first state to enact legislation based on the National Association of Insurance Commissioners Insurance Data Security Model Law (“MDL-668”). On May 27, 2022, Vermont Governor Phil Scott signed H.515 to 500.23) and they submit a written statement to the Commissioner certifying such compliance.

Insurance 107
article thumbnail

NYDFS issues significant guidance on insurers using AI or external data

Data Protection Report

On January 17, 2024 the New York Department of Financial Services (“NYDFS”) published a Proposed Insurance Circular Letter (“Proposed Circular”) regarding the use of artificial intelligence systems (“AIS”) and external consumer data and information sources (“ECDIS”) in insurance underwriting and pricing.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

are subject to laws such as the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (the HITECH Act), as well as regulations such as the Clinical Laboratory Improvements Amendments (CLIA). See the Best Cybersecurity Awareness Training for Employees.

article thumbnail

Developments in Health Privacy and Cybersecurity Policy and Regulation: OCR Issues Cybersecurity Warnings and New Health Data Legislation Is Introduced

Data Matters

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

article thumbnail

FTC Seeks Comment on Proposed Changes to its GLBA Safeguards and Privacy Rules

Data Matters

Of particular note, the Safeguards Rule NPRM proposes to align the FTC’s requirements with those of the New York Department of Financial Services (“NYDFS”), as found in its cybersecurity regulations, and the National Association of Insurance Commissioners (“NAIC”), as found in its insurance data security model law.

Privacy 68
article thumbnail

New York Enacts Stricter Data Cybersecurity Laws

Data Matters

The law broadens the definition of “private information” which sets forth the information elements that, if breached, could trigger a notification obligation. The Stop Hacks and Improve Electronic Data Security Act. To define “reasonable” safeguards, the statute provides examples of administrative, technical and physical safeguards.

article thumbnail

Top 6 Best Practices for Data Governance

Collibra

Here is an example of how an insurance company working with Collibra set up its operating model: The insurance company is cross-functional, frequently requiring collaboration among different lines of business, such as finance, sales, marketing and IT. Decentralized or federated (there are multiple groups of authority). Onboarding.