Article 2 Insurance Data Security Act

This article is comprised of the following sections:
  • §38.2-621 Definitions
  • §38.2-622 Private cause of action; neither created nor curtailed
  • §38.2-623 Information security program
  • §38.2-624 Investigation of a cybersecurity event
  • §38.2-625 Notice to Commissioner
  • §38.2-626 Notice to consumers
  • §38.2-627 Powers and duties of the Commission; exclusive state standards
  • §38.2-628 Confidentiality
  • §38.2-629 Exceptions