RI LEG Insurance Cybersecurity


On Jun. 26, RI LEG enacted bill on information security for insurance.


  • RI LEG passed bill SB 2802, HB 7281, on consumer insurance cybersecurity events.
  • Amends RI INS 27-13.1-3 on examinations; adds RI INS 1-27-1-46, RI INS 1-27-1-47.
  • RI INS 1-27-2-29 and RI INS 1-27-2-30 on domestic/foreign insurance data security.
  • Bill Provisions
  • Amends statutory provisions regarding domestic and foreign insurers and insurer examinations to provide provisions for cybersecurity events involving RI consumers.
  • Bill requires insurers maintain a comprehensive written information security program, based on the insurer's risk assessment, for the protection of nonpublic information.
  • Legislative History
  • On Mar. 22, 2024, bill introduced in Senate; on Jun. 12, 2024, bill passed in Senate.
  • On Jun. 12, 2024, bill introduced in House; on Jun. 13, 2024, bill was passed in House.
  • On Jun. 21, 2024, bill delivered to governor; on Jun. 26, 2024, governor signed bill.
  • Effectiveness
  • This act, signed into law as Ch. 354 and 355, shall take effect on Jan. 1, 2025.

Regulators RI LEG
Entity Types CNSM; Ins
Reference Bill, SB2802 SUBA, 6/26/2024; Citation: *RI INS* 27-13.1-3, 1-27-1, 1-27-2;
Functions Compliance; Cyber; Exams; Legal; Privacy; Reporting; Technology
Countries United States of America
Category
State
Products Insurance
Regions Am
Rule Type Final
Rule Date 6/26/2024
Effective Date 1/1/2025
Rule Id 217438
Linked to N/A
Reg. Last Update 6/26/2024
Report Section US Consumer

Last substantive update on 07/02/2024