U.S. State Data Security Laws Authoritative Source Content

[#1]

RSA Archer provides authoritative source content for U.S. State Data Security Laws.  Two authoritative source content packages are available:

• Data Security Laws for Companies and Insurers - This import pack contains multiple state data security regulations.  The following state laws are included:
  • California State Law (§ 1798.91.04)  -  CA § 1798.91.04 - Security of Connected Devices. (2018)
  • California State Law (§ 1898.81.5)  -  CA § 1898.81.5 - Customer records. (2015) 
  • Colorado State Law (CO § 6-1-713.5)  -  CO § 6-1-713.5 - Protection of personal identifying information. (2018) 
  • Connecticut State Law (CT § 38a-999b)
  • Connecticut State Law (CT § 4e-70)
  • Florida State Law (FL § 501.171(2))  -  FL § 501.171(2) - Requirements for Data Security. (2014) 
  • Illinois State Law (815 ILCS 530/45)  -  815 ILCS 530/45 - Data security. (2017)
  • Indiana State Law (IN § 24-4.9-3-3.5)  -  IN § 24-4.9-3-3.5 - Duties of a data base owner. (2017) 
  • Kansas State Law (KS § 50-6,139b)  -  KS § 50-6,139b - Requirements for holders of personal information. (2016) 
  • Michigan State Law (MI 1956 PA 218, Chapter 5A (Bill MI H 6491))  -  MI H 6491 - Data Security. (2018) 
  • Minnesota State Law (MN § 325M.05)  -  MN § 325M.05 - SECURITY OF INFORMATION. (2002) 
  • Mississippi State Law (MS S 2831)  -  MS S 2831 - Insurance Data Security Law. (2019) 
  • NAIC Insurance Data Security Model Law  -  NAIC Insurance Data Security Model Law. (Q4 2017) 
  • Nevada State Law (NV §§ 603A.210)  -  NV §§ 603A.210 - Security measures. (2005) 
  • Nevada State Law (NV §§ 603A.215)  -  NV §§ 603A.215 - Security measures for data collector that accepts payment card. (2011) 
  • New Hampshire State Law (NH CHAPTER 420-P (Bill NH S 194))  -  NH S 194 - Insurance Data Security Law. (2019) 
  • Ohio State Law (OH § 1354 (1354.01 to 1354.05))  -  OH § 1354 - Businesses Maintaining Recognized Cybersecurity Programs (2018) 
  • Ohio State Law (OH Chapter 3965 (Bill OH S 273))  -  OH S 273 - Cybersecurity Requirements for Insurance Companies. (2019) 
  • South Carolina State Law (SC § 38-99)  -  SC § 38-99 - Insurance Data Security Act. (2019) 
  • Vermont State Law (VT § 2446)  -  VT § 2446 - Annual registration. (2019)
  • Vermont State Law (VT § 2447)  -  VT § 2447 - Data broker duty to protect information; standards; technical requirements. (2019) 

• Data Security Laws for Government - This import pack contains multiple state data security regulations that are applicable for government entities.  The following state laws are included: 
  • Arizona State Law (AZ § 18-105)
  • California State Law (CA § 11549.3 & .4)
  • California State Law (CA § 8586.5)
  • California State Law (CA § 8592.30-8592.45)
  • Colorado State Law (CO §§ 24-37.5-403, -404, -404.5, -407)
  • Florida State Law (FL § 20.61)
  • Florida State Law (FL § 282.318)
  • Georgia State Law (GA § 50-25-4)
  • Idaho State Law (ID §§ 67-827/A)
  • Illinois State Law (20 ILCS 1375/Art. 5)
  • Illinois State Law (30 ILCS 5/3-2.4)
  • Indiana State Law (IN § 4-13.1-2-2)
  • Kansas State Law (KS § 75-7240)
  • Kentucky State Law (KY § 42.724)
  • Kentucky State Law (KY § 61.932)
  • Maryland State Law (MD § 10-1301 to 1304)
  • Minnesota State Law (MD § 16E.03)
  • New York State Law (NY § 103)
  • North Carolina State Law (NC § 143B-1376)
  • Ohio State Law (OH § 125.18)
  • Oklahoma State Law (OK § 62-34.32)
  • Oregon State Law (OR § 276A.300)
  • Oregon State Law (OR Chap. 110)
  • South Carolina State Law (SC § 93.21)
  • Texas State Law (TX § 2054.0286)
  • Utah State Law (UT § 63F-2-102)
  • Vermont State Law (3 V.S.A. chapter 56)
  • Virginia State Law (VA § 2.2-2009)
  • Virginia State Law (VA § 2.2-603)
  • Washington State Law (WA § 43.105.020)
  • Washington State Law (WA § 43.105.054)
  • Washington State Law (WA § 43.105.215)
  • Wyoming State Law (WY § 9-21-101)

Languages

This content is available in English only.

Mappings

The mappings for the U.S. State Data Security Authoritative Sources to the RSA Archer Control Standard Library are available in the authoritative source content pack.

Content Source

Links to the content sources are provided in the listing above.

Licensing Restrictions

The authoritative source content is available with the use of the RSA Archer Policy Program Management, RSA Archer IT Policy Program Management, and/or RSA Archer Authorization and Assessment use cases. No additional license is required.

For More Information

To learn more about the U.S. Data Security Authoritative Source Content:

• Review the RSA Archer Content Import Tip Sheet for instructions on how to import content; and
• Download the Data Security Laws for Companies and Insurers Authoritative Source Content Package
• Download the Data Security Laws for Government Authoritative Source Content Package

For Additional Support

To learn more about this content, please contact your Account Rep for additional details. For technical support questions, please open a support case or contact RSA Archer at archersupport@rsa.com for more information.