{"data":{"id":"us-ak/as-21.23.300","jurisdiction":"us-ak","citation":"AS 21.23.300","heading":"Applicability.","body":"(a) AS 21.23.250 and 21.23.260 do not apply to\n(1) a licensee, including an independent contractor, with fewer than 10 employees;\n(2) a licensee if the licensee is an employee, agent, representative, or designee of another licensee covered by an information security program.\n(b) AS 21.23.240 — 21.23.399 do not apply to a licensee subject to the Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191) if the licensee\n(1) has established and maintains an information security program under statutes, regulations, procedures, or guidelines established under the Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191);\n(2) is in compliance with the statutes, regulations, procedures, and guidelines established under the Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191); and\n(3) submits to the director a written statement certifying that the licensee is in compliance with the statutes, regulations, procedures, and guidelines established under the Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191).\n(c) If a licensee no longer qualifies for an exception to the applicability of AS 21.23.240 — 21.23.399 under this section, the licensee shall comply with AS 21.23.240 — 21.23.399 within 180 days after the licensee no longer qualifies for the exception.","path":["Title 21. Insurance.","Chapter 23. Risk management and insurance data security.","Article 2. Insurance Data Security."],"source_url":"https://www.akleg.gov/basis/statutes.asp#21.23.300","current_through":"Alaska Statutes 2025 (34th Legislature, 2025-2026)","vintage":"","retrieved_at":"2026-09-02T06:17:40Z","sha256":"e6d70ae1164926eb481a731d05aa30400a5ce7805b696a5251f1f83cdc1702d6","source_id":"us-ak","stale":false,"prev":"us-ak/as-21.23.290","next":"us-ak/as-21.23.310"},"notice":"GroundRules: Original legal text. Not legal advice."}