Also repealed ND INS 26.1-02.2-11 (implementation dates for certain requirements).
Bill Provisions
Removed exception to cybersecurity event for data returned, destroyed, or not used.
Deleted reasonable likelihood of materially harming a consumer from factors requiring insurers to report cybersecurity events to the commissioner of insurance.
Removed requirement for consent of insurer before making investigation data public.
Deleted exception to requirements made for insurers with fewer than 25 employees.
Legislative History
On Jan. 7, 2025, bill introduced in Senate; on Jan. 31, 2025, bill passed the Senate.
On Feb. 18, 2025, bill introduced in House; on Mar. 18, 2025, bill passed the House.
On Mar. 24, 2025 bill sent to governor; on Mar. 26, 2025, bill signed by governor.
Effectiveness
Per ND Constitution, upon approval by governor bill will become effective Aug. 1, 2025
