{"data":{"id":"us-pa/40-pa.c.s.-4515","jurisdiction":"us-pa","citation":"40 Pa.C.S. § 4515","heading":"Oversight of third-party service provider arrangements.","body":"A licensee shall:\n(1) Exercise due diligence in selecting its third-party service provider.\n(2) Require a third-party service provider to implement appropriate administrative, technical and physical measures to protect and secure the information systems and nonpublic information that are accessible to, or held by, the third-party service provider.","path":["Title 40 - INSURANCE","PART II REGULATION OF INSURERS AND RELATED PERSONS GENERALLY","CHAPTER 45 INSURANCE DATA SECURITY","SUBCHAPTER B PROCEDURES"],"source_url":"https://www.palegis.us/statutes/consolidated/view-statute?txtType=HTM\u0026ttl=40\u0026div=0\u0026chpt=45\u0026sctn=15\u0026subsctn=0","current_through":"2024-08-21 (Statute Update stamp, 40 Pa.C.S.)","vintage":"","retrieved_at":"2026-09-02T16:33:08Z","sha256":"12fb3fe30b992a3b4f9ce1239a57e93e4cfaada9a444bd306c91ec71142c2296","source_id":"us-pa","stale":false,"prev":"us-pa/40-pa.c.s.-4514","next":"us-pa/40-pa.c.s.-4516"},"notice":"GroundRules: Original legal text. Not legal advice."}