Insurance Data Security Law –
Act No. 2019-98
The law broadly defines a “licensee” as any person (including an entity) that is licensed or authorized to operate or required to be licensed or authorized to operate pursuant to Alabama insurance laws except a purchasing group or a risk retention group chartered and licensed in a state or jurisdiction other than Alabama. The law can apply to insurance producers and companies. It does, however, contain size and revenue-related exemptions and other exemptions.
An Insurance Data Security Breach must be reported to the ALDOI as soon as possible.
Exemptions must be reported annually (by February), and any changes to your exemption status must be reported to the ALDOI.