Bulletin: NH2020001

Dear Associates: 

As you may be aware, the NH legislature enacted a new chapter, RSA 420-P, relating to insurance data security. This new law, which went into effect on January 1, 2020, may impose obligations upon you with respect to reporting a cybersecurity event. A “cybersecurity event” is defined as “an event resulting in unauthorized access to, disruption or misuse of, an information system or nonpublic information stored on such system.” An online form is available to report a cybersecurity event to the NH Insurance Department. The form may be found on the Department’s website at https://www.nh.gov/insurance/legal/cybersecurity.htm.

Below are some critical links to bookmark and review. The first is a bulletin recently issued by The State of New Hampshire Insurance Department. It is a good resource in that it summarizes the law and its requirements. Please review that bulletin to be sure you are in compliance with this new law. As stated, the law went into effect on January 1, 2020, and if your business does not fall into one of the exceptions or safe harbors, you will need to be familiar with the rules regarding reporting a cybersecurity event. The bulletin also addresses two future deadlines-one relative to when you must submit a written report evidencing your compliance and another regarding third-party service providers. The second link is to the statute itself.

https://www.nh.gov/insurance/media/bulletins/2020/documents/ins-20-001-ab-cyber-security.pdf 

https://www.gencourt.state.nh.us/rsa/html/XXXVII/420-P/420-P-mrg.htm

If you have any questions relating to this or other bulletins, please contact a Stewart Title Guaranty Company underwriter.

For on-line viewing of this and other bulletins, please log onto www.vuwriter.com.