118 chapters · 1,472 sections in this title.
N.D.C.C. § 26.1-02.2-01 Definitions
4.8K chars
As used in this chapter: 1. "Authorized individual" means an individual known to and screened by the licensee and determined to be necessary and appropriate to have access to the nonpublic information held by the licensee and the licensee's information systems. 2. "Commissioner" …
N.D.C.C. § 26.1-02.2-02 Exclusive regulation
0.2K chars
Notwithstanding any other provision of law, this chapter establishes the exclusive state standards applicable to licensees for data security, the investigation of a cybersecurity event, and notification to the commissioner.
N.D.C.C. § 26.1-02.2-03 Information security program
9.4K chars
1. Commensurate with the size and complexity of the licensee, the nature and scope of the licensee's activities, including the licensee's use of third-party service providers, and the sensitivity of the nonpublic information used by the licensee or in the licensee's possession, c…
N.D.C.C. § 26.1-02.2-04 Investigation of a cybersecurity event
1.4K chars
1. If a licensee learns a cybersecurity event has or may have occurred, the licensee, an outside vendor, or service provider designated to act on behalf of the licensee, shall conduct a prompt investigation. 2. During the investigation, the licensee or an outside vendor or servic…
N.D.C.C. § 26.1-02.2-05 Notification of a cybersecurity event
7.0K chars
1. A licensee shall notify the commissioner as promptly as possible, but no later than three business days from a determination that a cybersecurity event has occurred if: a. This state is the licensee's state of domicile, in the case of an insurer, or this state is the licensee'…
N.D.C.C. § 26.1-02.2-06 Power of commissioner
0.6K chars
1. The commissioner may examine and investigate the affairs of any licensee to determine whether the licensee has been or is engaged in any conduct in violation of this chapter. This power is in addition to the powers the commissioner has under chapter 26.1-03. Any investigation …
N.D.C.C. § 26.1-02.2-07 Confidentiality
3.2K chars
1. Any documents, materials, or other information in the control or possession of the department which are furnished by a licensee, or an employee or agent thereof acting on behalf of a licensee pursuant to this chapter, or that are obtained by the commissioner in an investigatio…
N.D.C.C. § 26.1-02.2-08 Exceptions
1.3K chars
1. The following exceptions apply to this chapter: a. A licensee with less than five million dollars in gross revenue or less than ten million dollars in year-end assets is exempt from subsections 2 through 10 of section 26.1-02.2-03. b. A licensee that is subject to, governed by…
N.D.C.C. § 26.1-02.2-09 Penalties
0.1K chars
In the case of a violation of this chapter, a licensee may be penalized in accordance with section 26.1-01-03.3.
N.D.C.C. § 26.1-02.2-10 Rules and regulations
0.1K chars
The commissioner may adopt reasonable rules necessary for the implementation of this chapter.
N.D.C.C. § 26.1-02.2-11 Implementation dates
0.0K chars
Repealed by S.L. 2025, ch. 280, § 5.