Alice Kane is counsel and Analisa Dillingham is an associate at Clifford Chance LLP. This post is based on a Clifford Chance publication by Ms. Kane, Ms. Dillingham, and Ryan Buffkin.
The Cybersecurity (EX) Working Group and the Innovation and Technology (EX) Task Force of the National Association of Insurance Commissioners (“NAIC”), at the NAIC Summer 2017 National Meeting in Philadelphia, approved the Insurance Data Security Model Law (the “Model Law”). This is a significant step in cybersecurity regulation. The Model Law closely parallels the comprehensive and first-in-the-nation New York Department of Financial Services (“DFS”) Cybersecurity Requirements for Financial Services Companies regulation that took effect on March 1, 2017 (the “NYDFS Cybersecurity Regulation”). The Model Law will now be considered by the NAIC Executive Committee and, if approved, will be presented to the Joint Meeting of the Executive Committee and Plenary for final approval. Capitalized terms used and not defined herein have the meanings set forth in the Model Law.