<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>66974</law_id><section_number>38.2-1845.18</section_number><catch_line>Information security program</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><structure><unit label="title" level="1" order_by="1" identifier="38.2">Insurance</unit><unit label="chapter" level="2" order_by="1" identifier="18">Insurance Agents</unit><unit label="article" level="3" order_by="1" identifier="4.1">Licensing of Public Adjusters</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> Each <span class="dictionary">public adjuster</span> shall implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of policyholder information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the <span class="dictionary">public adjuster</span>&#x2019;s business and the nature and scope of its activities. <a id="paragraph-242781" class="section-permalink" href="https://vacode.org/38.2-1845.18/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> The information security program shall be designed to: <a id="paragraph-242782" class="section-permalink" href="https://vacode.org/38.2-1845.18/#B"><i class="fa fa-link"/></a></p></section>
						<section id="B1" class="indent-1"><p><span class="prefix-number">1.</span> Ensure the security and confidentiality of policyholder information; <a id="paragraph-242783" class="section-permalink" href="https://vacode.org/38.2-1845.18/#B1"><i class="fa fa-link"/></a></p></section>
						<section id="B2" class="indent-1"><p><span class="prefix-number">2.</span> Protect against any anticipated threats or hazards to the security or integrity of the information; and <a id="paragraph-242784" class="section-permalink" href="https://vacode.org/38.2-1845.18/#B2"><i class="fa fa-link"/></a></p></section>
						<section id="B3" class="indent-1"><p><span class="prefix-number">3.</span> Protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any policyholder. <a id="paragraph-242785" class="section-permalink" href="https://vacode.org/38.2-1845.18/#B3"><i class="fa fa-link"/></a></p></section></text><history>2012, cc. 734, 735.</history><metadata></metadata></law>
