Bulletin: NH2020001

Date:
February 19, 2020
To:
All New Hampshire Issuing Offices
RE:
GENERAL - Chapter 420-P Insurance Data Security Act

Dear Associates: 

As you may be aware, the NH legislature enacted a new chapter, RSA 420-P, relating to insurance data security. This new law, which went into effect on January 1, 2020, may impose obligations upon you with respect to reporting a cybersecurity event. A “cybersecurity event” is defined as “an event resulting in unauthorized access to, disruption or misuse of, an information system or nonpublic information stored on such system.” An online form is available to report a cybersecurity event to the NH Insurance Department. The form may be found on the Department’s website at https://www.nh.gov/insurance/legal/cybersecurity.htm.

Below are some critical links to bookmark and review. The first is a bulletin recently issued by The State of New Hampshire Insurance Department. It is a good resource in that it summarizes the law and its requirements. Please review that bulletin to be sure you are in compliance with this new law. As stated, the law went into effect on January 1, 2020, and if your business does not fall into one of the exceptions or safe harbors, you will need to be familiar with the rules regarding reporting a cybersecurity event. The bulletin also addresses two future deadlines-one relative to when you must submit a written report evidencing your compliance and another regarding third-party service providers. The second link is to the statute itself.

https://www.nh.gov/insurance/media/bulletins/2020/documents/ins-20-001-ab-cyber-security.pdf 

https://www.gencourt.state.nh.us/rsa/html/XXXVII/420-P/420-P-mrg.htm


If you have any questions relating to this or other bulletins, please contact a Stewart Title Guaranty Company underwriter.

For on-line viewing of this and other bulletins, please log onto www.vuwriter.com.

THIS BULLETIN IS FURNISHED TO INFORM YOU OF CURRENT DEVELOPMENTS. AS A REMINDER, YOU ARE CHARGED WITH KNOWLEDGE OF THE CONTENT ON VIRTUAL UNDERWRITER  AS IT EXISTS FROM TIME TO TIME AS IT APPLIES TO YOU, AS WELL AS ANY OTHER INSTRUCTIONS. OUR UNDERWRITING AGREEMENTS DO NOT AUTHORIZE OUR ISSUING AGENTS TO ENGAGE IN SETTLEMENTS OR CLOSINGS ON BEHALF OF STEWART TITLE GUARANTY COMPANY. THIS BULLETIN IS NOT INTENDED TO DIRECT YOUR ESCROW OR SETTLEMENT PRACTICES OR TO CHANGE PROVISIONS OF APPLICABLE UNDERWRITING AGREEMENTS. CONFIDENTIAL, PROPRIETARY, OR NONPUBLIC PERSONAL INFORMATION SHOULD NEVER BE SHARED OR DISSEMINATED EXCEPT AS ALLOWED BY LAW. IF APPLICABLE STATE LAW OR REGULATION IMPOSES ADDITIONAL REQUIREMENTS, YOU SHOULD CONTINUE TO COMPLY WITH THOSE REQUIREMENTS.

References

Bulletins Replaced:
None
Related Bulletins:
None
Underwriting Manual:
None
Exceptions Manual:
None
Forms:
None