8 states have specifically applied thier data breach notificagtion requirements to insurers.
- California
- Connecticut
- Maine
- New Hampshire
- Ohio
- Rhode Island
- Vermont
- Washington
- Wisconsin
The laws vary on these points, but all specifically apply to insurers:
- who has to be notified
- when notification has be given
- what information triggers a notification
- what powers an Attorney General has
- which entities have to provide the notification