Title 18, Insurance Code

§ 8605. Investigation of a cybersecurity event. (a) If a licensee learns that a cybersecurity event has or may have occurred, the licensee, or an outside vendor or service provider designated to act on behalf of the licensee, shall conduct a prompt investigation. (b) During an in…

§ 8606. Notification of a cybersecurity event. (a) Notification to the Commissioner. — A licensee shall notify the Commissioner as promptly as possible but in no event later than 3 business days from the licensee’s determination that a cybersecurity event has occurred if either o…

§ 8607. Power of Commissioner. (a) The Commissioner may examine and investigate the affairs of a licensee to determine whether the licensee has been or is engaged in any conduct in violation of this chapter. The Commissioner’s power under this section is in addition to the powers…

§ 8608. Confidentiality. (a) (1) Documents, materials, or other information in the Department’s control or possession that a licensee or employee or agent acting on behalf of a licensee furnished under § 8604(i) or § 8606(b)(2)b., (b)(2)c., (b)(c)d., (b)(2)e., (b)(2)h., (b)(2)j.,…

§ 8609. Exceptions. (a) The following exceptions apply to this chapter: (1) A licensee with fewer than 15 employees is exempt from § 8604 of this chapter. (2) A licensee subject to the Health Insurance Portability and Accountability Act [P.L. 104-191, as amended] that has establi…

§ 8610. Penalties. If a licensee violates this chapter, the licensee may be subject to penalties under § 329 of this title.82 Del. Laws, c. 176, § 1;

§ 8611. Regulations. The Commissioner may, in accordance with § 311 of this title, promulgate regulations necessary to carry out the provisions of this chapter.82 Del. Laws, c. 176, § 1;