{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/38.2-1845.18.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/38.2-1845.18.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/38.2-1845.18.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/38.2-1845.18.html"}],"law_id":66974,"edition_id":1,"section_id":66974,"structure_id":14212,"section_number":"38.2-1845.18","catch_line":"Information security program","history":"2012, cc. 734, 735.","full_text":"A\n\nEach public adjuster shall implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of policyholder information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the public adjuster&#8217;s business and the nature and scope of its activities.B\n\nThe information security program shall be designed to:1\n\nEnsure the security and confidentiality of policyholder information;2\n\nProtect against any anticipated threats or hazards to the security or integrity of the information; and3\n\nProtect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any policyholder.","order_by":null,"text":{"0":{"id":242781,"text":"Each public adjuster shall implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of policyholder information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the public adjuster&#8217;s business and the nature and scope of its activities.","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"B"},"1":{"id":242782,"text":"The information security program shall be designed to:","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A","next_prefix":"B1"},"2":{"id":242783,"text":"Ensure the security and confidentiality of policyholder information;","type":"section","prefixes":["B","1"],"prefix":"1","entire_prefix":"B1","prefix_anchor":"B1","level":2,"prior_prefix":"B","next_prefix":"B2"},"3":{"id":242784,"text":"Protect against any anticipated threats or hazards to the security or integrity of the information; and","type":"section","prefixes":["B","2"],"prefix":"2","entire_prefix":"B2","prefix_anchor":"B2","level":2,"prior_prefix":"B1","next_prefix":"B3"},"4":{"id":242785,"text":"Protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any policyholder.","type":"section","prefixes":["B","3"],"prefix":"3","entire_prefix":"B3","prefix_anchor":"B3","level":2,"prior_prefix":"B2"}},"ancestry":[{"id":14212,"edition_id":1,"name":"Licensing of Public Adjusters","identifier":"4.1","label":"article","depth":3,"order_by":1,"parent_id":13203,"metadata":{},"date_created":"2026-06-26 03:47:17","date_modified":"2026-06-26 03:47:17","permalink":{"id":212641,"object_type":"structure","relational_id":14212,"identifier":"4.1","token":"38.2\/18\/4.1","url":"\/38.2\/18\/4.1\/","edition_id":1,"permalink":0,"preferred":1}},{"id":13203,"edition_id":1,"name":"Insurance Agents","identifier":"18","label":"chapter","depth":2,"order_by":1,"parent_id":12698,"metadata":{},"date_created":"2026-06-26 03:44:26","date_modified":"2026-06-26 03:44:26","permalink":{"id":212411,"object_type":"structure","relational_id":13203,"identifier":"18","token":"38.2\/18","url":"\/38.2\/18\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12698,"edition_id":1,"name":"Insurance","identifier":"38.2","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:49","date_modified":"2026-06-26 03:43:49","permalink":{"id":210661,"object_type":"structure","relational_id":12698,"identifier":"38.2","token":"38.2","url":"\/38.2\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":58484,"structure_id":14212,"section_number":"38.2-1845.1","catch_line":"Definitions","url":"\/38.2-1845.1\/","token":"38.2\/18\/4.1\/38.2-1845.1","metadata":false},{"id":73810,"structure_id":14212,"section_number":"38.2-1845.10","catch_line":"Grounds for placing on probation, refusal to issue or renew, revocation, or suspension of license","url":"\/38.2-1845.10\/","token":"38.2\/18\/4.1\/38.2-1845.10","metadata":false},{"id":87101,"structure_id":14212,"section_number":"38.2-1845.11","catch_line":"Termination, suspension, or revocation of license","url":"\/38.2-1845.11\/","token":"38.2\/18\/4.1\/38.2-1845.11","metadata":false},{"id":75278,"structure_id":14212,"section_number":"38.2-1845.12","catch_line":"Standards of conduct for public adjusters","url":"\/38.2-1845.12\/","token":"38.2\/18\/4.1\/38.2-1845.12","metadata":false},{"id":67841,"structure_id":14212,"section_number":"38.2-1845.13","catch_line":"Contract between public adjuster and insured","url":"\/38.2-1845.13\/","token":"38.2\/18\/4.1\/38.2-1845.13","metadata":false},{"id":76560,"structure_id":14212,"section_number":"38.2-1845.14","catch_line":"Fees","url":"\/38.2-1845.14\/","token":"38.2\/18\/4.1\/38.2-1845.14","metadata":false},{"id":80102,"structure_id":14212,"section_number":"38.2-1845.15","catch_line":"Record retention","url":"\/38.2-1845.15\/","token":"38.2\/18\/4.1\/38.2-1845.15","metadata":false},{"id":75597,"structure_id":14212,"section_number":"38.2-1845.16","catch_line":"Escrow or trust accounts","url":"\/38.2-1845.16\/","token":"38.2\/18\/4.1\/38.2-1845.16","metadata":false},{"id":67191,"structure_id":14212,"section_number":"38.2-1845.17","catch_line":"Requirement to report to Commission","url":"\/38.2-1845.17\/","token":"38.2\/18\/4.1\/38.2-1845.17","metadata":false},{"id":66974,"structure_id":14212,"section_number":"38.2-1845.18","catch_line":"Information security program","url":"\/38.2-1845.18\/","token":"38.2\/18\/4.1\/38.2-1845.18","metadata":false},{"id":70523,"structure_id":14212,"section_number":"38.2-1845.19","catch_line":"What laws applicable; rulemaking authority","url":"\/38.2-1845.19\/","token":"38.2\/18\/4.1\/38.2-1845.19","metadata":false},{"id":76889,"structure_id":14212,"section_number":"38.2-1845.2","catch_line":"License required of resident public adjusters","url":"\/38.2-1845.2\/","token":"38.2\/18\/4.1\/38.2-1845.2","metadata":false},{"id":61033,"structure_id":14212,"section_number":"38.2-1845.20","catch_line":"Immunities; confidentiality","url":"\/38.2-1845.20\/","token":"38.2\/18\/4.1\/38.2-1845.20","metadata":false},{"id":77035,"structure_id":14212,"section_number":"38.2-1845.21","catch_line":"Authority of Commission to delegate certain functions","url":"\/38.2-1845.21\/","token":"38.2\/18\/4.1\/38.2-1845.21","metadata":false},{"id":62705,"structure_id":14212,"section_number":"38.2-1845.22","catch_line":"Power of Commission to investigate affairs of persons engaged in the business of public adjusting; penalties for refusal to permit investigation","url":"\/38.2-1845.22\/","token":"38.2\/18\/4.1\/38.2-1845.22","metadata":false},{"id":65504,"structure_id":14212,"section_number":"38.2-1845.23","catch_line":"False information and advertising generally","url":"\/38.2-1845.23\/","token":"38.2\/18\/4.1\/38.2-1845.23","metadata":false},{"id":55407,"structure_id":14212,"section_number":"38.2-1845.3","catch_line":"Exemptions from article","url":"\/38.2-1845.3\/","token":"38.2\/18\/4.1\/38.2-1845.3","metadata":false},{"id":70584,"structure_id":14212,"section_number":"38.2-1845.4","catch_line":"Examinations","url":"\/38.2-1845.4\/","token":"38.2\/18\/4.1\/38.2-1845.4","metadata":false},{"id":65937,"structure_id":14212,"section_number":"38.2-1845.5","catch_line":"Licensing nonresidents; reciprocal agreements with other states and Canadian provinces","url":"\/38.2-1845.5\/","token":"38.2\/18\/4.1\/38.2-1845.5","metadata":false},{"id":86867,"structure_id":14212,"section_number":"38.2-1845.6","catch_line":"Individual moving into the Commonwealth from another state or Canadian province","url":"\/38.2-1845.6\/","token":"38.2\/18\/4.1\/38.2-1845.6","metadata":false},{"id":62133,"structure_id":14212,"section_number":"38.2-1845.7","catch_line":"Refusal to issue; hearing; new application","url":"\/38.2-1845.7\/","token":"38.2\/18\/4.1\/38.2-1845.7","metadata":false},{"id":59250,"structure_id":14212,"section_number":"38.2-1845.8","catch_line":"Renewal application and fee; reinstatement; waiver","url":"\/38.2-1845.8\/","token":"38.2\/18\/4.1\/38.2-1845.8","metadata":false},{"id":67352,"structure_id":14212,"section_number":"38.2-1845.9","catch_line":"Repealed","url":"\/38.2-1845.9\/","token":"38.2\/18\/4.1\/38.2-1845.9","metadata":false}],"previous_section":{"id":67191,"structure_id":14212,"section_number":"38.2-1845.17","catch_line":"Requirement to report to Commission","url":"\/38.2-1845.17\/","token":"38.2\/18\/4.1\/38.2-1845.17","metadata":false},"next_section":{"id":70523,"structure_id":14212,"section_number":"38.2-1845.19","catch_line":"What laws applicable; rulemaking authority","url":"\/38.2-1845.19\/","token":"38.2\/18\/4.1\/38.2-1845.19","metadata":false},"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/38.2-1845.18\/","history_text":"<p>This law was first created in 2012. The record of its establishment is cataloged in chapters <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?121+ful+CHAP0734\">734<\/a> and <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?121+ful+CHAP0735\">735<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year.<\/p>","references":false,"refers_to":false,"permalink":{"id":212679,"object_type":"law","relational_id":66974,"identifier":"38.2-1845.18","token":"38.2\/18\/4.1\/38.2-1845.18","url":"\/38.2-1845.18\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/38.2-1845.18\/","token":"38.2\/18\/4.1\/38.2-1845.18","dublin_core":{"Title":"Information security program","Type":"Text","Format":"text\/html","Identifier":"\u00a7 38.2-1845.18","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t<section id=\"A\"><p><span class=\"prefix-number\">A.<\/span> Each <span class=\"dictionary\">public adjuster<\/span> shall implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of policyholder information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the <span class=\"dictionary\">public adjuster<\/span>&#8217;s business and the nature and scope of its activities. <a id=\"paragraph-242781\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/38.2-1845.18\/#A\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B\"><p><span class=\"prefix-number\">B.<\/span> The information security program shall be designed to: <a id=\"paragraph-242782\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/38.2-1845.18\/#B\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> Ensure the security and confidentiality of policyholder information; <a id=\"paragraph-242783\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/38.2-1845.18\/#B1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> Protect against any anticipated threats or hazards to the security or integrity of the information; and <a id=\"paragraph-242784\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/38.2-1845.18\/#B2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B3\" class=\"indent-1\"><p><span class=\"prefix-number\">3.<\/span> Protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any policyholder. <a id=\"paragraph-242785\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/38.2-1845.18\/#B3\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>","plain_text":"                                 CODE OF VIRGINIA\n\nINFORMATION SECURITY PROGRAM (\u00a7 38.2-1845.18)\n\nA. Each public adjuster shall implement a comprehensive written information\nsecurity program that includes administrative, technical, and physical\nsafeguards for the protection of policyholder information. The administrative,\ntechnical, and physical safeguards included in the information security program\nshall be appropriate to the size and complexity of the public adjuster&#8217;s\nbusiness and the nature and scope of its activities.\n\nB. The information security program shall be designed to:\n\n   1. Ensure the security and confidentiality of policyholder information;\n\n   2. Protect against any anticipated threats or hazards to the security or\n   integrity of the information; and\n\n   3. Protect against unauthorized access to or use of the information that could\n   result in substantial harm or inconvenience to any policyholder.\n\nHISTORY: 2012, cc. 734, 735.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}