Sec. 565.
(1) A licensee that has fewer than 25 employees, including any independent contractors, is exempt from section 555.
(2) A licensee subject to and in compliance with the health insurance portability and accountability act of 1996, Public Law 104–191, and with regulations promulgated under that act, is not required to comply with this chapter except for the requirements under sections 559 and 561.
(3) An employee, agent, representative, or designee of a licensee, who is also a licensee, is exempt from section 555 and does not need to develop its own information security program to the extent that the employee, agent, representative, or designee is covered by the information security program of the other licensee.
(4) If a licensee ceases to qualify for the exception under subsection (1), the licensee has 180 days to comply with this chapter.
(5) This chapter takes effect on January 20, 2021. A licensee shall implement section 555 by January 20, 2022. However, a licensee has until January 20, 2023 to implement section 555(6).
History: Add. 2018, Act 690, Eff. Jan. 20, 2021 Popular Name: Act 218
Structure Michigan Compiled Laws
Chapter 500 - Insurance Code of 1956
Act 218 of 1956 - The Insurance Code of 1956 (500.100 - 500.8302)
218-1956-5A - Chapter 5a Data Security (500.550...500.565)
Section 500.550 - Private Cause of Action Not Created; Exclusive Standards.
Section 500.553 - Definitions.
Section 500.557 - Occurrence of Cybersecurity Event; Investigation; Maintenance of Records.
Section 500.565 - Exemption for Certain Licensees; Timeline for Implementation and Compliance.