Article 2: Insurance Data Security Act

This article is comprised of the following sections:

§38.2-621 Definitions
§38.2-622 Private cause of action; neither created nor curtailed
§38.2-623 Information security program
§38.2-624 Investigation of a cybersecurity event
§38.2-625 Notice to Commissioner
§38.2-626 Notice to consumers
§38.2-627 Powers and duties of the Commission; exclusive state standards
§38.2-628 Confidentiality
§38.2-629 Exceptions
