§ 27-2-27-1 Applicability of chapter
§ 27-2-27-2 “Authorized individual”
§ 27-2-27-3 “Commissioner”
§ 27-2-27-4 “Consumer”
§ 27-2-27-5 “Cybersecurity event”
§ 27-2-27-6 “Department”
§ 27-2-27-7 “Encrypted”
§ 27-2-27-8 “Information security program”
§ 27-2-27-9 “Information system”
§ 27-2-27-10 “Licensee”
§ 27-2-27-11 “Multi-factor authentication”
§ 27-2-27-12 “Nonpublic information”
§ 27-2-27-13 “Publicly available information”
§ 27-2-27-14 “Risk assessment”
§ 27-2-27-15 “Third party service provider”
§ 27-2-27-16 Information security program; requirements
§ 27-2-27-17 Risk assessment; requirements
§ 27-2-27-18 Actions required based on risk assessment results
§ 27-2-27-19 Board of directors; executive management
§ 27-2-27-20 Incident response plan
§ 27-2-27-21 Investigation of cybersecurity event
§ 27-2-27-22 Notice to ceding insurers and commissioner of cybersecurity event
§ 27-2-27-23 Notice to producers of cybersecurity event
§ 27-2-27-24 Powers of commissioner
§ 27-2-27-25 Confidentiality
§ 27-2-27-26 Exemptions from chapter
§ 27-2-27-27 Suspension; revocation
§ 27-2-27-28 Rules
§ 27-2-27-29 Private right of action
§ 27-2-27-30 Exclusivity
§ 27-2-27-31 Financial institutions
§ 27-2-27-32 Affirmative defense

Terms Used In Indiana Code > Title 27 > Article 2 > Chapter 27 - Insurance Data Security

  • Assets: (1) The property comprising the estate of a deceased person, or (2) the property in a trust account.
  • commissioner: refers to the insurance commissioner appointed under IC 27-1-1-2. See Indiana Code 27-2-27-3
  • consumer: means a resident of Indiana whose nonpublic information is in a licensee's possession, custody, or control. See Indiana Code 27-2-27-4
  • Contract: A legal written agreement that becomes binding when signed.
  • cybersecurity event: means an event resulting in unauthorized access to or a disruption or misuse of an information system or nonpublic information stored on the information system that has a reasonable likelihood of materially harming a consumer or any material part of the normal operations of the licensee. See Indiana Code 27-2-27-5
  • department: means the department of insurance created by IC 27-1-1-1. See Indiana Code 27-2-27-6
  • Discovery: Lawyers' examination, before trial, of facts and documents in possession of the opponents to help the lawyers prepare for trial.
  • encrypted: means the transformation of data into a form that results in a low probability of assigning meaning without the use of a protective process or key. See Indiana Code 27-2-27-7
  • Evidence: Information presented in testimony or in documents that is used to persuade the fact finder (judge or jury) to decide the case for one side or the other.
  • in writing: include printing, lithographing, or other mode of representing words and letters. See Indiana Code 1-1-4-5
  • information security program: means the administrative, technical, and physical safeguards that a licensee uses to access, collect, distribute, process, protect, store, use, transmit, dispose of, or otherwise handle nonpublic information. See Indiana Code 27-2-27-8
  • information system: means either of the following:

    Indiana Code 27-2-27-9

  • Jurisdiction: (1) The legal authority of a court to hear and decide a case. Concurrent jurisdiction exists when two courts have simultaneous responsibility for the same case. (2) The geographic area over which the court has authority to decide cases.
  • licensee: means a person that is:

    Indiana Code 27-2-27-10

  • multi-factor authentication: means authentication through verification of at least two (2) of the following types of authentication factors:

    Indiana Code 27-2-27-11

  • nonpublic information: means electronic information that is not publicly available information and is described in either of the following subdivisions:

    Indiana Code 27-2-27-12

  • Obligation: An order placed, contract awarded, service received, or similar transaction during a given period that will require payments during the same or a future period.
  • publicly available information: means any information that a licensee has a reasonable basis to believe is lawfully made available to the general public from:

    Indiana Code 27-2-27-13

  • risk assessment: means the assessment a licensee is required to conduct under section 17 of this chapter. See Indiana Code 27-2-27-14
  • Subpoena: A command to a witness to appear and give testimony.
  • Testify: Answer questions in court.
  • third party service provider: means a person that contracts with a licensee to maintain, process, store, or otherwise is permitted access to nonpublic information through its provision of services to the licensee. See Indiana Code 27-2-27-15
  • Tort: A civil wrong or breach of a duty to another person, as outlined by law. A very common tort is negligent operation of a motor vehicle that results in property damage and personal injury in an automobile accident.
  • Year: means a calendar year, unless otherwise expressed. See Indiana Code 1-1-4-5