Wisconsin Reintroduces Insurance Data Security Law

If passed, licensees must have comprehensive risk assessment and information security programs (threat management, employee monitoring, access controls, secure development, audit trails, periodic evaluations); cybersecurity incidents that could materially harm consumers or normal business operations must be reported to the State Insurance Commissioner (within 3 business days), and affected residents (pursuant to State breach notification requirements).