H 4655

AN ACT TO AMEND THE CODE OF LAWS OF SOUTH CAROLINA, 1976, TO ENACT THE "SOUTH CAROLINA INSURANCE DATA SECURITY ACT" BY ADDING CHAPTER 99 TO TITLE 38 SO AS TO DEFINE NECESSARY TERMS; TO REQUIRE A LICENSEE TO DEVELOP, IMPLEMENT, AND MAINTAIN A COMPREHENSIVE INFORMATION SECURITY PROGRAM BASED ON THE LICENSEE'S RISK ASSESSMENT AND TO ESTABLISH CERTAIN REQUIREMENTS FOR THE SECURITY PROGRAM, TO PROVIDE MINIMUM REQUIREMENTS FOR A LICENSEE'S BOARD OF DIRECTORS, IF APPLICABLE, TO REQUIRE A LICENSEE TO MONITOR THE SECURITY PROGRAM AND MAKE ADJUSTMENTS IF NECESSARY, TO PROVIDE THAT THE LICENSEE MUST ESTABLISH AN INCIDENT RESPONSE PLAN AND TO ESTABLISH CERTAIN REQUIREMENTS FOR THE INCIDENT RESPONSE PLAN, TO REQUIRE A LICENSEE TO SUBMIT A STATEMENT TO THE DIRECTOR OF THE DEPARTMENT OF INSURANCE ANNUALLY; TO ESTABLISH CERTAIN REQUIREMENTS FOR A LICENSEE IN THE EVENT OF A CYBERSECURITY EVENT; TO REQUIRE A LICENSEE TO NOTIFY THE DIRECTOR OF CERTAIN INFORMATION IN THE EVENT OF A CYBERSECURITY EVENT; TO GRANT THE DIRECTOR THE POWER AND AUTHORITY TO EXAMINE AND INVESTIGATE A LICENSEE; TO PROVIDE THAT DOCUMENTS, MATERIALS, OR OTHER INFORMATION IN THE CONTROL OR POSSESSION OF THE DEPARTMENT MUST BE TREATED AS CONFIDENTIAL AND TO AUTHORIZE THE DIRECTOR TO SHARE OR RECEIVE CONFIDENTIAL DOCUMENTS UNDER CERTAIN CIRCUMSTANCES; TO PROVIDE EXEMPTIONS FROM THE PROVISIONS OF THIS CHAPTER; TO PROVIDE PENALTIES FOR VIOLATIONS; AND TO AUTHORIZE THE DIRECTOR TO PROMULGATE REGULATIONS. - ratified title