§ 500.550 Private cause of action not created; exclusive standards
§ 500.553 Definitions
§ 500.555 Comprehensive written information security program; requirements; duties of licensee and board of directors; third-party service provider; incident response plan; certification of compliance
§ 500.557 Occurrence of cybersecurity event; investigation; maintenance of records
§ 500.559 Notification of cybersecurity event involving nonpublic information; duty to update and supplement notifications to director; contents; application to third-party service provider; duties of cedi
§ 500.561 Notice of cybersecurity event to residents of this state; conditions and requirements; duties of licensee; substitute notice; notification to certain consumer reporting agencies; exception; compl
§ 500.563 Confidentiality; use of documents, materials, or other information; duties of director
§ 500.565 Exemption for certain licensees; timeline for implementation and compliance

Ask an insurance law question, get an answer ASAP!
Click here to chat with a lawyer about your rights.

Terms Used In Michigan Laws > Chapter 500 > Act 218 of 1956 > Chapter 5A - Data Security

  • Actual notice: includes the physical presentation of an order, a revocation of an order, or another written document authorized under this act from or on behalf of a declarant. See Michigan Laws 333.1052
  • Beneficiary: A person who is entitled to receive the benefits or proceeds of a will, trust, insurance policy, retirement plan, annuity, or other contract. Source: OCC
  • Consumer: means an individual, including, but not limited to, an applicant, a policyholder, an insured, a beneficiary, a claimant, and a certificate holder, who is a resident of this state and whose nonpublic information is in a licensee's possession, custody, or control. See Michigan Laws 500.553
  • Contract: A legal written agreement that becomes binding when signed.
  • Corporation: A legal entity owned by the holders of shares of stock that have been issued, and that can own, receive, and transfer property, and carry on business in its own name.
  • Cybersecurity event: means an event that results in unauthorized access to and acquisition of, or disruption or misuse of, an information system or nonpublic information stored on an information system. See Michigan Laws 500.553
  • Declarant: means an individual who has executed a do-not-resuscitate order on his or her own behalf or on whose behalf a do-not-resuscitate order has been executed as provided in this act. See Michigan Laws 333.1052
  • Department: means the department of insurance and financial services. See Michigan Laws 500.102
  • Director: means , unless the context clearly implies a different meaning, the director of the department. See Michigan Laws 500.102
  • Discovery: Lawyers' examination, before trial, of facts and documents in possession of the opponents to help the lawyers prepare for trial.
  • Emergency medical technician: means that term as defined in section 20904 of the public health code, MCL 333. See Michigan Laws 333.1052
  • Emergency medical technician specialist: means that term as defined in section 20904 of the public health code, MCL 333. See Michigan Laws 333.1052
  • Encrypted: means the transformation of data into a form that results in a low probability of assigning meaning without the use of a protective process or key. See Michigan Laws 500.553
  • Evidence: Information presented in testimony or in documents that is used to persuade the fact finder (judge or jury) to decide the case for one side or the other.
  • Fraud: Intentional deception resulting in injury to another.
  • Freedom of Information Act: A federal law that mandates that all the records created and kept by federal agencies in the executive branch of government must be open for public inspection and copying. The only exceptions are those records that fall into one of nine exempted categories listed in the statute. Source: OCC
  • Hospital: means that term as defined in section 20106 of the public health code, MCL 333. See Michigan Laws 333.1052
  • identification bracelet: means a wrist bracelet that meets the requirements of section 7 and that is worn by a declarant while a do-not-resuscitate order is in effect. See Michigan Laws 333.1052
  • in writing: shall be construed to include printing, engraving, and lithographing; except that if the written signature of a person is required by law, the signature shall be the proper handwriting of the person or, if the person is unable to write, the person's proper mark, which may be, unless otherwise expressly prohibited by law, a clear and classifiable fingerprint of the person made with ink or another substance. See Michigan Laws 8.3q
  • Information security program: means the administrative, technical, and physical safeguards that a licensee uses to access, collect, distribute, process, protect, store, use, transmit, dispose of, or otherwise handle nonpublic information. See Michigan Laws 500.553
  • Information system: means a discrete set of electronic information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of electronic nonpublic information, as well as any specialized system such as an industrial or process controls system, a telephone switching and private branch exchange system, or an environmental control system. See Michigan Laws 500.553
  • Insurance producer: means that term as defined in section 1201. See Michigan Laws 500.116
  • Insurer: means an individual, corporation, association, partnership, reciprocal exchange, inter-insurer, Lloyds organization, fraternal benefit society, or other legal entity, engaged or attempting to engage in the business of making insurance or surety contracts. See Michigan Laws 500.106
  • Jurisdiction: (1) The legal authority of a court to hear and decide a case. Concurrent jurisdiction exists when two courts have simultaneous responsibility for the same case. (2) The geographic area over which the court has authority to decide cases.
  • Licensee: means a licensed insurer or producer, and other persons licensed or required to be licensed, authorized, or registered, or holding or required to hold a certificate of authority under this act. See Michigan Laws 500.553
  • Medical first responder: means that term as defined in section 20906 of the public health code, MCL 333. See Michigan Laws 333.1052
  • Minor child: means an individual who is less than 18 years of age, has been diagnosed by an attending physician as having an advanced illness, and is not emancipated by operation of law as provided in section 4 of 1968 PA 293, MCL 722. See Michigan Laws 333.1052
  • Multi-factor authentication: means authentication through verification of at least 2 of the following types of authentication factors:
    (i) Knowledge factors, such as a password. See Michigan Laws 500.553
  • Nonpublic information: means electronic information that is not publicly available information and is any of the following:
  •     (i) Business-related information of a licensee, the tampering with which, or unauthorized disclosure, access, or use of which, would cause a material adverse impact to the business, operations, or security of the licensee. See Michigan Laws 500.553
  • Nurse: means an individual who is licensed or otherwise authorized to engage in the practice of nursing or practice of nursing as a licensed practical nurse under part 172 of the public health code, MCL 333. See Michigan Laws 333.1052
  • Obligation: An order placed, contract awarded, service received, or similar transaction during a given period that will require payments during the same or a future period.
  • order: means a document executed under this act directing that, if an individual suffers cessation of both spontaneous respiration and circulation in a setting outside of a hospital, resuscitation will not be initiated. See Michigan Laws 333.1052
  • Organization: means a company, corporation, firm, partnership, association, trust, or other business entity or a governmental agency. See Michigan Laws 333.1052
  • Paramedic: means that term as defined in section 20908 of the public health code, MCL 333. See Michigan Laws 333.1052
  • Parent: means the natural or adoptive parent of a minor child who possesses legal decision-making authority as to the important decisions affecting the welfare of the minor child. See Michigan Laws 333.1052
  • person: may extend and be applied to bodies politic and corporate, as well as to individuals. See Michigan Laws 8.3l
  • Physician: means an individual who is licensed or otherwise authorized to engage in the practice of medicine or the practice of osteopathic medicine and surgery under article 15 of the public health code, MCL 333. See Michigan Laws 333.1052
  • Public health code: means the public health code, 1978 PA 368, MCL 333. See Michigan Laws 333.1052
  • Public law: A public bill or joint resolution that has passed both chambers and been enacted into law. Public laws have general applicability nationwide.
  • Publicly available information: means any information that a licensee has a reasonable basis to believe is lawfully made available to the general public from federal, state, or local government records, by widely distributed media, or by disclosures to the general public that are required to be made by federal, state, or local law. See Michigan Laws 500.553
  • resuscitate: means perform cardiopulmonary resuscitation or a component of cardiopulmonary resuscitation, including, but not limited to, any of the following:
  •     (i) Cardiac compression. See Michigan Laws 333.1052
  • Risk assessment: means the risk assessment that each licensee is required to conduct under section 555(3). See Michigan Laws 500.553
  • School: means a nonpublic school or a public school as those terms are defined in section 5 of the revised school code, 1976 PA 451, MCL 380. See Michigan Laws 333.1052
  • state: when applied to the different parts of the United States, shall be construed to extend to and include the District of Columbia and the several territories belonging to the United States; and the words "United States" shall be construed to include the district and territories. See Michigan Laws 8.3o
  • Subpoena: A command to a witness to appear and give testimony.
  • Testify: Answer questions in court.
  • Third-party service provider: means a person that is not a licensee and that contracts with a licensee to maintain, process, or store, or otherwise is permitted access to nonpublic information, through its provision of services to the licensee. See Michigan Laws 500.553