The National Association of Insurance Commissioners (NAIC) adopted the “Insurance Data Security Model Law” in 2017. The law requires insurance organizations to employ comprehensive cybersecurity programs, and while the new regulations are only part of a model law, they are quickly being adopted by individual states. The green states highlighted have adopted the NAIC Model Law.