PocketLaw | Michigan Compiled Laws | Chapter 5a Data Security

Chapter 5a Data Security (500.550...500.565)

Checkout our iOS App for a better way to browser and research.

Section
500.550

Private Cause of Action Not Created; Exclusive Standards.

Section
500.553

Definitions.

Section
500.555

Comprehensive Written Information Security Program; Requirements; Duties of Licensee and Board of Directors; Third-Party Service Provider; Incident Response Plan; Certification of Compliance.

Section
500.557

Occurrence of Cybersecurity Event; Investigation; Maintenance of Records.

Section
500.559

Notification of Cybersecurity Event Involving Nonpublic Information; Duty to Update and Supplement Notifications to Director; Contents; Application to Third-Party Service Provider; Duties of Ceding Insurers With Direct Contractual Relationship.

Section
500.561

Notice of Cybersecurity Event to Residents of This State; Conditions and Requirements; Duties of Licensee; Substitute Notice; Notification to Certain Consumer Reporting Agencies; Exception; Compliance With Health Insurance Portability and Accountability Act Considered Compliance With Section; Notice With Intent to Defraud; Misdemeanor; Penalty; Failure to Provide Notice; Civil Fine; Aggregate Liability; Applicability of Section; Definitions.

Section
500.563

Confidentiality; Use of Documents, Materials, or Other Information; Duties of Director.

Section
500.565

Exemption for Certain Licensees; Timeline for Implementation and Compliance.