{"data":{"id":"us-ok/okla.-stat.-tit.-36-36-674","jurisdiction":"us-ok","citation":"Okla. Stat. tit. 36, § 36-674","heading":"Cybersecurity event — Investigation by licensee","body":"A. If the licensee learns that a cybersecurity event has or may\n\nhave occurred, the licensee, or an outside vendor or service\n\nprovider designated to act on behalf of the licensee, shall conduct\n\na prompt investigation.\n\nB. During the investigation, the licensee, or an outside vendor\n\nor service provider designated to act on behalf of the licensee,\n\nshall, at a minimum:\n\n1. Determine whether a cybersecurity event has occurred;\n\n2. Assess the nature and scope of the cybersecurity event;\n\n3. Identify any nonpublic information that may have been\n\ninvolved in the cybersecurity event; and\n\n4. Perform or oversee reasonable measures to restore the\n\nsecurity of the information systems compromised in the cybersecurity\n\nevent in order to prevent further unauthorized acquisition, release,\n\nor use of nonpublic information in the possession, custody, or\n\ncontrol of the licensee.\n\nC. If the licensee learns that a cybersecurity event has or may\n\nhave occurred in a system maintained by a third-party service\n\nprovider, the licensee shall complete the steps listed in subsection\n\nB of this section or confirm and document that the third-party\n\nservice provider has completed those steps.\n\nD. The licensee shall maintain records concerning all\n\ncybersecurity events for a period of at least five (5) years from\n\nthe date of the cybersecurity event and shall produce those records\n\nupon request by the Insurance Commissioner.","path":["OK Code","Title 36"],"source_url":"https://www.oklegislature.gov/OK_Statutes/CompleteTitles/os36.pdf","current_through":"2026-08-14","vintage":"open-us-law v2026.08, retrieved 2026-09-14","retrieved_at":"2026-09-14T18:32:36Z","sha256":"99ff29f1bfa4da167289aa660f76b79604daa11250c51392fac4e29f5858eaa3","source_id":"us-ok","stale":false,"prev":"us-ok/okla.-stat.-tit.-36-36-673","next":"us-ok/okla.-stat.-tit.-36-36-675"},"notice":"GroundRules: Original legal text. Not legal advice."}