Exam DISC-DA Practice Question 217
Study guide: Exam DISC-DA
An insurer domiciled in State P determines that an intruder accessed a database holding names and Social Security numbers. The data cover 300 residents of State Q and 200 residents of State R, and in both states the breach has a reasonable likelihood of materially harming the affected residents. States P, Q and R have all enacted the NAIC Insurance Data Security Model Law as written. Under the model law's notification test, which commissioners must the insurer notify within 72 hours of its determination?
- A) State P's commissioner only
- B) State P's, State Q's and State R's commissioners
- C) State Q's commissioner only
- D) State P's and State Q's commissioners
Answer this question and see the worked solution