NAIC Insurance Data Security Model Law (MDL-668)
The National Association of Insurance Commissioners (NAIC) Insurance Data Security Model Law (Model 668) establishes data security standards for the insurance industry. Adopted by NAIC in 2017, it has been enacted by over 20 US states.
Domains
Third-Party and Incident Management
Enforcement and Administration
Definitions and Scope
Information Security Program
Governance and Oversight
Frequently Asked Questions
Map NAIC Insurance Data Security Model Law (MDL-668) to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.