{"data":{"id":"us-ky/krs-393a.820","jurisdiction":"us-ky","citation":"KRS 393A.820","heading":"Security of information.","body":"(1) If a holder is required to include confidential information in a report to the\nadministrator, the information shall be provided by a secure means.\n(2) If confidential information in a record is provided to and maintained by the\nadministrator or administrat or's agent as required by this chapter, the administrator\nor agent shall:\n(a) Implement administrative, technical, and physical safeguards to protect the\nsecurity, confidentiality, and integrity of the information as required by KRS\n365.720 to 365.730 and federal privacy and data security law, whether or not\nthe administrator or the administrator's agent is subject to the law;\n(b) Protect against reasonably anticipated threats or hazards to the security,\nconfidentiality, or integrity of the information; and\n(c) Protect against unauthorized access to or use of the information which could\nresult in substantial harm or inconvenience to a holder or the holder's\ncustomers, including insureds, annuitants, and policy or contract owners and\ntheir beneficiaries.\n(3) The administrator:\n(a) After notice and comment, shall adopt and implement a security plan that\nidentifies and assesses reasonably foreseeable internal and external risks to\nconfidential information in the administrator's possession and seeks to\nmitigate the risks; and\n(b) Shall ensure that an administrator's agent adopts and implements a similar\nplan with respect to confidential information in the agent's possession.\n(4) The administrator and the administrator's agent shall educate and train their\nemployees regarding the plan adopted under subsection (3) of this section.\n(5) The administrator and the administrator's agent shall in a secure manner return or\ndestroy all confidential information no longer reasonably needed under this chapter.","path":["KRS Chapter 393A"],"source_url":"https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=48179","current_through":"Includes enactments through the 2026 Regular Session","vintage":"09/05/2026","retrieved_at":"2026-09-05T20:59:25Z","sha256":"18256e9ce166892df59fb1893543ceda5dc2bd6b2d86772c6119cd52e03e5ef6","source_id":"us-ky","stale":false,"prev":"us-ky/krs-393a.810","next":"us-ky/krs-393a.830"},"notice":"GroundRules: Original legal text. Not legal advice."}