The Vermont Statutes Online
The Statutes below include the actions of the 2025 session of the General Assembly.
NOTE: The Vermont Statutes Online is an unofficial copy of the Vermont Statutes Annotated that is provided as a convenience.
Subchapter
014
:
CONFIDENTIALITY AND SECURITY OF INFORMATION
(Cite as: 27 V.S.A. § 1616)
-
§ 1616. Security of information
(a) If a holder is required to include confidential information in a report to the Administrator,
the information must be provided by a secure means.
(b) If confidential information in a record is provided to and maintained by the Administrator
or Administrator’s agent as required by this chapter, the Administrator or agent shall:
(1) implement administrative, technical, and physical safeguards to protect the security,
confidentiality, and integrity of the information required by 9 V.S.A. chapter 62
and federal privacy and data security law whether or not the Administrator or the
Administrator’s agent is subject to the law;
(2) protect against reasonably anticipated threats or hazards to the security, confidentiality,
or integrity of the information; and
(3) protect against unauthorized access to or use of the information that could result
in substantial harm or inconvenience to a holder or the holder’s customers, including
insureds, annuitants, and policy or contract owners and their beneficiaries.
(c) The Administrator:
(1) after notice and comment, shall adopt and implement a security plan that identifies
and assesses reasonably foreseeable internal and external risks to confidential information
in the Administrator’s possession and seeks to mitigate the risks; and
(2) shall ensure that the Administrator’s agent adopts and implements a similar plan with
respect to confidential information in the agent’s possession.
(d) The Administrator and the Administrator’s agent shall educate and train their employees
regarding the plan adopted under subsection (c) of this section.
(e) The Administrator and the Administrator’s agent shall in a secure manner return or
destroy all confidential information no longer reasonably needed under this chapter. (Added 2019, No. 93 (Adj. Sess.), § 2, eff. Jan. 1, 2021.)