Commensurate with the size and complexity of the licensee, the nature and scope of the licensee's activities, including its use of third-party service providers, and the sensitivity of the nonpublic information used by the licensee or in the licensee's possession, custody, or control, each licensee shall develop, implement, and maintain a comprehensive written information security program based on the licensee's risk assessment and that contains administrative, technical, and physical safeguards for the protection of nonpublic information and the licensee's information system.
Haw. Rev. Stat. § 431:3B-201
Implementation of an information security program
Known as the Insurance Code
The act spans §§ 431–431 (1,434 sections).
L 2021, c 112, pt of §2
Official source: Hawaii State Legislature. Reproduced from public-domain Hawaii statutes; confirm against the official source for the current text. Not legal advice.