In this hectic year, insurers shouldn’t lose track of the National Association of Insurance Commissioners’ standards for data security. Which states have adopted the NAIC Model Law, and what approach has each state taken? Insurers should give careful consideration to the complex differences from state to state when it comes to data protection and reporting cybersecurity events.
Florida has enacted House Bill 1189, which prohibits life and long-term care insurers from canceling, limiting, or denying coverage or adjusting premium rates based on genetic information.
As we previously reported, the bill amends Florida Statute 627.4301, which currently prohibits health insurers’ use of genetic information for insurance purposes. As amended, the statute removes former carve-outs for life, disability, and long-term care insurers, but certain carve-outs remain, such as those for accident-only policies, hospital indemnity or fixed indemnity policies, dental policies, and vision policies.
Concerns over the use of credit history in the insurance industry have been on regulators’ radar for some time, and economic uncertainty and increasingly widespread calls to address income inequality and systemic racial discrimination have made the issue all the more timely. Amid this backdrop, Washington Insurance Commissioner Mike Kreidler has asked the state legislature to introduce legislation to amend current law in order to discontinue the use of credit-based insurance scores, which he calls unfair and discriminatory.
In October 2017, the NAIC adopted its Insurance Data Security Model Law and released it to the states for legislative consideration. The purpose of the Model is to “establish standards for data security and standards for the investigation and notification to the Commissioner of a Cybersecurity Event applicable to Licensees.” In this alert, we briefly outline the requirements of the Model and provide an update on the status of the Model among the states and information on compliance effective dates. We will continue to monitor these issues.