An Act relating to insurance; relating to insurance data security; relating to mammograms; amending Rule 26, Alaska Rules of Civil Procedure, and Rules 402 and 501, Alaska Rules of Evidence; and providing for an effective date.

This bill strengthens data security requirements for insurance companies operating in Alaska by mandating that they conduct regular risk assessments to identify potential threats to customer information. Based on these assessments, insurers must develop and maintain a comprehensive written security program that includes administrative, technical, and physical safeguards to protect nonpublic data. The law specifically requires measures such as multi-factor authentication, encryption, and strict controls over who can access physical locations where sensitive information is stored. Additionally, the legislation updates state civil procedure and evidence rules to support the enforcement of these new security standards.