All Roll Calls
Yes: 501 • No: 5
Sponsored By: Jim Murphy (Republican)
Signed by Governor
Personalized for You
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
9 provisions identified: 4 benefits, 1 costs, 4 mixed.
Beginning January 1, 2026, licensees with fewer than 10 employees, including independent contractors, are exempt from the written security-program requirement. Insurance producers qualify for listed exceptions with fewer than 50 employees, under $5 million in annual revenue, or under $10 million in year-end assets. Qualifying health-privacy-regulated licensees are treated as compliant, but still must meet the specified notices to the state director. People covered by another licensee’s program are exempt from the program requirement to that extent; qualifying bank affiliates can rely on their bank’s program with documentation satisfactory to the director. A licensee that loses an exception has 180 calendar days to comply. General security-program implementation is due January 1, 2027; the requirements in subsection 6 have a separate January 1, 2028 deadline.
Beginning January 1, 2026, car-sharing programs assume owners’ third-party injury and property-damage liability during sharing, plus uninsured or underinsured motorist losses and legally required personal injury protection. The agreement sets the amount, which must meet Missouri’s minimum insurance requirements; owner fraud or collusion in a driver’s failure to return the car removes this liability assumption. Programs must ensure primary liability coverage for owners and drivers through owner, driver, program policies, or a combination. The policy must recognize car sharing or not exclude the shared driver, and meet higher out-of-state minimums up to policy limits. Program insurance generally pays from the first dollar and provides a defense when owner or driver coverage lapses or falls short. In disputes about vehicle control or return location, the program or its insurer takes primary liability when required records are unavailable, not kept, or withheld. Programs can buy insurance in their own names without being required to supply all coverage themselves. Programs and owners are also exempt from liability based solely on another person’s conduct, consistent with the cited federal law.
Beginning January 1, 2026, Missouri car-sharing agreements must explain daily rates, insurance or protection-package charges, emergency contacts, and driver insurance requirements. They must also explain repayment duties, that program coverage lasts only during sharing, and that owners’ policies may not cover the vehicle or protect the program. Before listing a liened vehicle, programs must warn owners that sharing, including without physical-damage coverage, may violate their loan contract. Programs must verify use times, pickup and drop-off locations, driver fees, and owner revenue, and provide records to owners or their or drivers’ insurers on request. Records must be kept for at least the applicable personal-injury lawsuit deadline.
Beginning January 1, 2026, insurance licensees must promptly investigate suspected cybersecurity events, restore security, and keep event records for at least three years. For vendor incidents, licensees must complete those steps or confirm and document the vendor’s work. They must notify the state insurance director promptly, within four business days after determining a reportable event occurred. Reporting applies when Missouri is the insurer’s domicile or producer’s home state and material harm to a Missouri consumer or normal operations is reasonably likely. It also applies when information about at least 250 Missouri consumers is reasonably involved and either another government notice is required or material harm to a consumer or normal operations is reasonably likely. Licensees must provide event details and material updates; consumer notices follow Missouri’s existing breach-notice law, with copies sent to the director. Assuming insurers without direct consumer contracts must notify affected ceding insurers and the regulator within three business days. Insurers must notify affected producers of record no later than required consumer notice, unless current producer information is unavailable.
Beginning January 1, 2026, the law sets Missouri’s exclusive state standards for insurance licensees’ data security and related investigations and regulator notices. Covered licensees must implement written, risk-based security programs by January 1, 2027, tailored to their size, work, vendors, and private information. Safeguards address access, encryption, monitoring, secure disposal, staff training, vendor risks, and incident response. Programs must name responsible people, be reviewed regularly, and include annual written board reports for businesses with boards. Missouri-based insurers must certify compliance by April 15 each year, keep certification records for five years, and document major weaknesses and repairs. The state insurance director can investigate compliance and enforce violations using existing penalty powers. Both acts allow agency rules, but their rulemaking authority and rules adopted after August 28, 2025, become invalid if chapter 536’s review power is invalidated.
Beginning January 1, 2026, personal auto insurers can exclude claims involving an owner’s shared vehicle and refuse to defend or pay them. Exclusions can cover liability, personal injury protection, uninsured or underinsured motorists, medical payments, comprehensive, and collision coverage. Existing rental, sharing, hire, and business-use exclusions remain intact, along with insurers’ existing underwriting, cancellation, and nonrenewal powers. An insurer that pays or defends an excluded sharing-period claim against an owner or driver can seek repayment from the program’s insurer.
Beginning January 1, 2026, car-sharing programs are solely responsible for equipment they install to monitor or support sharing. Programs must cover owners’ losses from equipment damage or theft during sharing, unless the owner caused the loss. Programs can seek repayment from drivers for equipment loss or damage during the sharing period.
Beginning January 1, 2026, covered insurance security reports and investigation records are confidential and legally protected. They are unavailable through public-records requests, subpoenas, discovery, evidence, or testimony in private civil lawsuits, but the director can use them for enforcement. Recipients generally cannot disclose, sell, or commercially use them; approved sharing with government bodies or the insurance commissioners’ association requires written confidentiality commitments and legal authority. Sharing does not waive legal protection, while final public enforcement decisions can go to the association’s database. The security law creates no new private right to sue, but preserves legal claims that exist independently.
Beginning January 1, 2026, programs can accept only drivers licensed or otherwise authorized to operate the vehicle’s class. Qualifying nonresident drivers must hold an appropriate home-state or foreign license and meet Missouri’s minimum driving age. Programs must keep drivers’ names, addresses, license numbers, and license-issuing locations. Before listing a vehicle, programs must verify it has no unrepaired safety recall and explain the recall rules to owners. Owners receiving actual recall notice cannot share the vehicle until repaired and must remove existing listings as soon as practicable. If a driver already has the vehicle, the owner must notify the program as soon as practicable.
Jim Murphy
Republican • House
There are no cosponsors for this bill.
All Roll Calls
Yes: 501 • No: 5
House vote • 4/30/2025
Truly Agreed To and Finally Passed
Yes: 145 • No: 2 • Other: 1
House vote • 4/30/2025
Reported Do Pass
Yes: 8 • No: 0
House vote • 4/30/2025
House Adopts
Yes: 149 • No: 2 • Other: 1
Senate vote • 4/28/2025
Third Read and Passed
Yes: 28 • No: 1
House vote • 3/13/2025
Third Read and Passed
Yes: 150 • No: 0 • Other: 1
House vote • 3/5/2025
Reported Do Pass
Yes: 10 • No: 0
House vote • 2/18/2025
HCS Reported Do Pass
Yes: 11 • No: 0
Delivered to Secretary of State (G)
Approved by Governor (G)
Delivered to Governor
Signed by President Pro Tem
Signed by House Speaker
House Message
Truly Agreed To and Finally Passed - AYES: 145 NOES: 2 PRESENT: 1
House Adopts - AYES: 149 NOES: 2 PRESENT: 1
Taken Up
Reported Do Pass - AYES: 8 NOES: 0 PRESENT: 0
Voted Do Pass
Executive Session Completed
Referred: Fiscal Review
Reported to the House with... - SS
Third Read and Passed - AYES: 28 NOES: 1 PRESENT: 0
SS Adopted
SS Offered
Taken Up for Third Reading
Reported Do Pass
Voted Do Pass
Executive Session Held
Public Hearing Held
Public Hearing Scheduled - Tuesday, April 1, 2025, 12:00 p.m., Senate Lounge - 3rd Floor
Second read and referred: Insurance and Banking
Reported to the Senate and First Read
Truly Agreed
4/30/2025
Perfected
3/11/2025
Committee Substitute
2/18/2025
Senate Substitute
2/18/2025
Introduced
1/22/2025
HB3, Appropriates money for the expenses, grants, refunds, and distributions of the Department of Higher Education and Workforce Development
HB8, Appropriates money for the expenses, grants, refunds, and distributions of the Department of Public Safety and the Department of National Guard
HB11, Appropriates money for the expenses, grants, refunds, and distributions of the Department of Social Services
HB10, Appropriates money for the expenses, grants, refunds, and distributions of the Department of Mental Health, the Department of Health and Senior Services, and the Missouri Health Facilities Review Committee
SB79, Modifies provisions relating to health care
SB271, Modifies provisions relating to emergency services