Indiana Code
Article 2. Powers and Duties of Insurers
Chapter 27. Insurance Data Security

27-2-27-1. Applicability of Chapter - Sec. 1. This chapter applies after June 30, 2021. As...

27-2-27-2. "Authorized Individual" - Sec. 2. As used in this chapter, "authorized individual" means...

27-2-27-3. "Commissioner" - Sec. 3. As used in this chapter, "commissioner" refers to...

27-2-27-4. "Consumer" - Sec. 4. As used in this chapter, "consumer" means a...

27-2-27-5. "Cybersecurity Event" - Sec. 5. As used in this chapter, "cybersecurity event" means...

27-2-27-6. "Department" - Sec. 6. As used in this chapter, "department" means the...

27-2-27-7. "Encrypted" - Sec. 7. As used in this chapter, "encrypted" means the...

27-2-27-8. "Information Security Program" - Sec. 8. As used in this chapter, "information security program"...

27-2-27-9. "Information System" - Sec. 9. As used in this chapter, "information system" means...

27-2-27-10. "Licensee" - Sec. 10. (a) As used in this chapter, "licensee" means...

27-2-27-11. "Multi-Factor Authentication" - Sec. 11. As used in this chapter, "multi-factor authentication" means...

27-2-27-12. "Nonpublic Information" - Sec. 12. As used in this chapter, "nonpublic information" means...

27-2-27-13. "Publicly Available Information" - Sec. 13. As used in this chapter, "publicly available information"...

27-2-27-14. "Risk Assessment" - Sec. 14. As used in this chapter, "risk assessment" means...

27-2-27-15. "Third Party Service Provider" - Sec. 15. As used in this chapter, "third party service...

27-2-27-16. Information Security Program; Requirements - Sec. 16. (a) A licensee shall develop, implement, and maintain...

27-2-27-17. Risk Assessment; Requirements - Sec. 17. A licensee shall conduct a risk assessment of...

27-2-27-18. Actions Required Based on Risk Assessment Results - Sec. 18. Based on the results of the risk assessment,...

27-2-27-19. Board of Directors; Executive Management - Sec. 19. (a) If the licensee has a board of...

27-2-27-20. Incident Response Plan - Sec. 20. (a) As part of its information security program,...

27-2-27-21. Investigation of Cybersecurity Event - Sec. 21. (a) If a licensee learns that a cybersecurity...

27-2-27-22. Notice to Ceding Insurers and Commissioner of Cybersecurity Event - Sec. 22. (a) In the case of a cybersecurity event...

27-2-27-23. Notice to Producers of Cybersecurity Event - Sec. 23. (a) In the case of a cybersecurity event:...

27-2-27-24. Powers of Commissioner - Sec. 24. (a) The commissioner may examine and investigate into...

27-2-27-25. Confidentiality - Sec. 25. (a) Any documents, materials, or other information in...

27-2-27-26. Exemptions From Chapter - Sec. 26. (a) A licensee is exempt from sections 16...

27-2-27-27. Suspension; Revocation - Sec. 27. If a licensee violates this chapter, the insurance...

27-2-27-28. Rules - Sec. 28. The insurance commissioner may adopt rules under IC...

27-2-27-29. Private Right of Action - Sec. 29. This chapter does not create a private right...

27-2-27-30. Exclusivity - Sec. 30. Notwithstanding any other provision of law, this chapter...

27-2-27-31. Financial Institutions - Sec. 31. The requirements of this chapter do not apply...

27-2-27-32. Affirmative Defense - Sec. 32. (a) A licensee that satisfies the requirements of...