Idaho Bills

Adds to existing law to establish the Insurance Data Security Act in the event of cybersecurity attacks.

The purpose of this legislation is to establish Idaho-specific standards for insurance-related data security. The legislation requires any person or entity licensed, authorized to operate, or registered, or required to be licensed, authorized, or registered pursuant to the insurance laws of Idaho to create a data security plan that is commensurate to the size and complexity of the insurer, and allows for the investigation of and notification to consumers and the Director of the Idaho Department of Insurance upon the occurrence of a Cybersecurity Event. It addresses privacy concerns associated with organizational cybersecurity practices, provides for rulemaking authority, and establishes various exceptions for certain individuals and entities.