The Maine Legislative Document 51 goes into force after a 9 months grace period. The new law establishes standards for data security. It requires the investigation and notification of cybersecurity events and an information security program including safeguards for the protection of nonpublic information. The law follows the NAIC Insurance Data Security Model Law, adopted by the National Association of Insurance Commissioners (NAIC) in 2017 and used as a template by several US state legislatures.
Original source