South Dakota Administrative Rules
Title 20 - PUBLIC SAFETY
Article 20:06 - INSURANCE
Chapter 20:06:45 - Privacy of consumer financial and health information
Section 20:06:45:20 - Information security program
Current through Register Vol. 50, page 114, March 25, 2024
Each licensee shall implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of customer information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the licensee and the nature and scope of its activities.
Licensed producers must determine the level of safeguards appropriate for their business. For those licensed producers that require only a minimum level of safeguards based upon their size and complexity, the appropriate level of safeguards may consist of the following:
(1) Physical safeguards ensuring that nonpublic personal information is under lock when agency personnel are not present to ensure its privacy; and
(2) Technical safeguards ensuring that any electronic information that can be potentially accessed by another person or entity be guarded by an appropriate software program; and
(3) Administrative safeguards that outline agency procedures indicating that nonpublic personal information is not to be provided to persons other than the insured, insurer or its representatives, or others as necessary to carry out the transaction or claim of the insured or customer or requests of the insured or customer and that spell out the specific physical and technical safeguards that are required by the agency.
General Authority: SDCL 58-2-40, 58-2-41.
Law Implemented: SDCL 58-2-40, 58-2-41.
