Skip to content
Back to Top

Cyber Security

In 2024, SB 134 was enacted that established insurance data security requirements in Alaska Statute (AS) 21.23. SB 134 has provisions with differing effective dates ranging from January 1, 2025, January 1, 2026, and January 1, 2027.

The statutes establish standards for data security, as well as investigation and notification requirements in the case of a cybersecurity event for licensees and admitted insurers regulated by the Alaska Division of Insurance. Bulletin B 24-11 and its reporting forms are intended to provide licensees and insurers with guidance for compliance with the provisions of the new statutes.

If you experience a cybersecurity event and need further guidance or information regarding your notification requirements under SB 134, you are welcome to contact the Investigations Unit at the Alaska Division of Insurance: