Law / United States / 
Arizona
Customer information security program of an insurance licensee
Ariz. Admin. Code R20-6-2102 and R20-6-2103
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2024. Publisher's page: https://apps.azsos.gov/public_services/Title_20/20-06.pdfIn force since .
A sector security regimes rule binding private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Security
As of .
What it requires
- Applies to a licensee, meaning an insurance institution, insurance producer, or insurance support organization; declare is_insurer where you hold that status. A purchasing group or an unauthorized insurer in regard to excess line business is not a licensee under the Article.
- Implement a comprehensive written customer information security program that includes administrative, technical, and physical safeguards for the protection of customer information, appropriate to the size and complexity of your organization and the nature and scope of your activities.
- Design the program to ensure the security and confidentiality of customer information, protect against any anticipated threats or hazards to the security or integrity of the information, and protect against unauthorized access to or use of the information.
These lines are LexLint's reading of the law's text, as of .
What this law does
A licensee must implement a comprehensive written customer information security program that includes administrative, technical, and physical safeguards for the protection of customer information. The safeguards must be appropriate to the size and complexity of the licensee and the nature and scope of its activities.
The program must be designed to ensure the security and confidentiality of customer information, protect against anticipated threats or hazards to its security or integrity, and protect against unauthorized access to or use of it. A licensee is an insurance institution, insurance producer, or insurance support organization.
Customer information is nonpublic personal information and privileged information about a customer, in paper, electronic or other form, maintained by or on behalf of an insurance institution, insurance producer, or insurance support organization. Section R20-6-2104 lists non-exclusive illustrations of how a licensee may implement those requirements. Article 21 was made by final rulemaking effective .
When LexLint raises it
When your app profile says your app is an insurer.