ALSK LEG Insurance Data Security


On May 15, ALSK LEG passed bill on various insurance provisions.


  • ALSK LEG passed SB 134 on insurance data security; information security programs.
  • Adds new sections under ALSK INS 21.23 regarding insurance data security programs.
  • Amends ALSK INS 21.42.375 to mandate the coverage for mammograms by insurers.
  • Also makes amendments to Alaska rules of civil procedure, Alaska rules of evidence.
  • Bill Provisions
  • Sets out that licensees shall develop, implement, and maintain an information security program and conduct risk assessment commensurate to licensee size and complexity.
  • Outlines information security program requirements; also the investigating and notification requirements to follow for licensees when a cybersecurity event occurs.
  • Establishes the criteria under which licensees are not subject to these provisions.
  • Bill defines diagnostic breast examination and supplemental breast examination.
  • Offers guidelines for basis of additional testing; guarantees coverage for diagnostic breast exams, mammograms, supplemental breast examinations by insurance plans.
  • Exception for high deductible health plans eligible for health savings tax deduction.
  • Legislative History
  • On Apr. 21, 2023, bill was introduced in Senate; on Apr. 29, 2024, bill passed Senate.
  • On May 1, 2024, bill was introduced in House; on May 14, 2024, amended bill passed.
  • On May 15, 2024, Senate concurred amendments; pending transmittal to governor.
  • Effectiveness
  • Bill provisions begin taking effect Jan. 1, 2025, with gradual implementation dates.
  • Aug. 2024 ALSK LEG Bill Approval
  • On Aug. 29, 2024, ALSK LEG reported bill approval without the governor's signature.
  • Bill became Chapter 39, effective Jan. 1, 2025 except s. 6 takes immediate effect, AS 21.23.290(a)(3) and (4) and (c), enacted by sec. 1 of this act take effect Jan. 1, 2025.
  • AS 21.23.250 and 21.23.260(a), (b), (c)(1) - (6) and (9) - (11), and (d) - (g), enacted by sec. 1, take effect Jan. 1, 2026; AS 21.23.260(c)(7) and (8) effective Jan. 1, 2027.
  • In Dec. 2024, ALSK INS issued guidance on insurance data security act, see #238004.

Regulators ALSK LEG
Entity Types CNSM; Ins
Reference Ch. 39, 8/29/2024; Bill, SB134, 5/15/2024; Citation: *ALSK INS* 21.23, 21.42.375;
Functions Claims/Accelerated Benefits; Compliance; Legal; Operations; Product Administration; Risk; Technology; Underwriting
Countries United States of America
Category
State
Products Insurance; Insurance-Health
Regions Am
Rule Type Final
Rule Date 5/15/2024
Effective Date 1/1/2025
Rule Id 212209
Linked to N/A
Reg. Last Update 8/29/2024
Report Section US Insurance

Last substantive update on 09/02/2024