Description
Alaska's provisions of the NAIC Insurance Data Security Model Law (#668) take effect in 2026. Insurance companies, agents, and other entities licensed by the state department of insurance must develop, implement, and maintain information security programs, investigate cybersecurity events, and notify the state insurance commissioner within 3 days.
Requirements
- Develop and implement information security program
- Establish cybersecurity event investigation procedures
- Implement 3-day commissioner notification process
- Conduct risk assessment per Model Law requirements
- Train staff on Alaska-specific insurance data security obligations
Applicable To
Insurers operating in AlaskaInsurance agents in AlaskaEntities licensed by Alaska Division of Insurance
Penalty Information
âš Regulatory penalties as determined by the state insurance commissioner, including license suspension or revocation.