Louisiana Louisiana originally issued information regarding the Security Program of the Insurance Data Security Law on June 3, 2001. This announcement provides updated guidance on the standards applicable to licensees relative to data security.
Licensees are responsible for developing, implementing, and maintaining an information security program (ISP) that complies with La. R.R. 22:2504 by Aug 1, 2021. This program is based on the licensee's risk assessment and is based on the size and complexities of the licensees and their third party associations. These third party providers are also to be held to the same standard once the licensee passes the ISP.
**Domestic Insurer Filing Requirements **
By 2/15/22 all domestic insurers must submit a Louisiana Insurance Data Security Law ISP certification form annually. If one is exempt, the exemption form must be filled in by this date.
**Exemptions**
States that hold similar ISP requirements are exempt. These states are: AL, CT, DE, IN, IA, ME, MI, MN, MS, NH, NY, ND, OH, SC, TN, VA, WI.
