Each licensee shall implement a comprehensive written information security program that includes administrative, technical and physical safeguards for the protection of customer information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the licensee and the nature and scope of its activities.
Cal. Code Regs. Tit. 10, § 2689.14
Note: Authority cited: Sections 791- 791.27, Insurance Code; and 15 U.S.C. Sections 6801, 6805, 6807 and 6824. Reference: Section 791, Insurance Code; and 15 U.S.C. Section 6825.