Duty LXD-7796
Is an insurer, in South Dakota
Insurance licensees, written information security program for customer informationsince 4 lines
S.D. Admin. R. 20:06:45:20 and 20:06:45:21 · Read the law's page
- Applies to a licensee: an insurer, producer or other person licensed, authorized or registered, or required to be, under South Dakota insurance law; declare is_insurer where you hold that status. The chapter reaches only nonpublic personal information about individuals who obtain products or services primarily for personal, family, or household purposes, and does not apply to information about companies or about individuals who obtain products or services for business, commercial, or agricultural purposes.
- Implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of customer information, appropriate to the size and complexity of the licensee and the nature and scope of its activities.
- Design the program to ensure the security and confidentiality of customer information, protect against any anticipated threats or hazards to the security or integrity of the information, and protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any customer.
- A licensed producer that needs only a minimum level of safeguards given its size and complexity may meet the duty with physical safeguards that keep nonpublic personal information under lock when personnel are not present, technical safeguards that guard electronic information another person could potentially access, and written administrative safeguards on who may receive nonpublic personal information.