California and Washington spell out rules for addressing data breaches

When data is breached, you must report that to the state as quickly as possible and may need to outline what you are doing about it

Insurance News

By

Big data equals big trouble, or at leas it can. In a world where practically every business collects customer data there is the potential of data being stolen and used to harm or embarrass people who have done nothing more nefarious than, say, purchase insurance.
 
You probably already take customer data, and the need to protect it, seriously. If you are doing business in California or Washington, your state departments of insurance have issued guidelines which must be followed.
 
In California, insurance businesses must notify their clients whose personal information “Was, or is reasonably believed to have been, acquired by an unauthorized person.” Additionally, any business who has had the data of more than 500 persons compromised must notify both the state attorney general and the California Department of Insurance. Such notification should go to Susan Bernard, Department of Insurance, 45 Fremont St., 24th floor, San Francisco, CA 94105, or [email protected].
 
In Washington, insurance businesses are required to notify the office of the insurance commissioner within two days of discovery of a breach. Businesses must also tell the department what actions are being or have been taken to remedy any situation that is likely to subject victims to criminal activity. Notice must be sent to Mary Childers, consumer advocacy program manager, Washington State Office of the Insurance Commissioner, Insurance 5000 Building, Box 40256, Olympia, WA 98504-0256 or [email protected].

Keep up with the latest news and events

Join our mailing list, it’s free!