Ind. Code § 27-2-27-16
Information security program; requirements
Indiana · Indiana Code Title 27 — Insurance · Status: effective
Cite this
- Citation
- Ind. Code § 27-2-27-16, Information security program; requirements, Indiana, version 1 as recorded 2026-09-28, yourstate.us, https://yourstate.us/provision/1663073
- Permanent ID
ys:prov:1663073@1- SHA-256
deb4a05f24d136d3ab01a19e72b6b7bfac0ed335afb150091d8a0f753f0a4dfb
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
Sec. 16.
(a) A licensee shall develop, implement, and maintain a comprehensive, written information security program that:
(1) is based on the risk assessment required under section 17 of this chapter; and
(2) contains administrative, technical, and physical safeguards for the protection of nonpublic information and the licensee's information systems.
(b) An information security program must accomplish the following:
(1) Protect the security and confidentiality of nonpublic information and information systems.
(2) Protect against any threats or hazards to the security or integrity of nonpublic information and information systems.
(3) Protect against unauthorized access to or use of nonpublic information and minimize the likelihood of harm to a consumer.
(4) Define and periodically reevaluate a schedule for retention of nonpublic information and a procedure for its destruction when no longer needed.