04/17/2024 01:30 PM Senate JUDICIARY

        SB 134-INS. DATA SECURITY; INFO. SECURITY PRGRMS                                                                    
                                                                                                                                
2:35:42 PM                                                                                                                    
CHAIR CLAMAN  announced the consideration  of CS FOR  SENATE BILL                                                               
NO.  134(L&C)  "An  Act  relating  to  insurance  data  security;                                                               
amending Rule 26, Alaska Rules  of Civil Procedure, and Rules 402                                                               
and  501,  Alaska  Rules  of   Evidence;  and  providing  for  an                                                               
effective date."                                                                                                                
                                                                                                                                
This  is the  third hearing  of SB  134 in  the Senate  Judiciary                                                               
Committee. The committee  adopted CSSB 134 version R  on April 5,                                                               
2024. The  intention is  to consider  a new  committee substitute                                                               
(CS), version D.                                                                                                                
                                                                                                                                
2:36:17 PM                                                                                                                    
BREANNA  KAKARUK,  Staff,  Senator   Matt  Claman,  Alaska  State                                                               
Legislature,  Juneau, Alaska,  presented the  summary of  changes                                                               
for SB 134 from version R to version D.                                                                                         
                                                                                                                                
[Original punctuation provided.]                                                                                                
                                                                                                                                
                       Summary of Changes                                                                                     
                                                                                                                              
     Senate Judiciary Committee: Version R to Version D                                                                     
                                                                                                                                
     Page 5, line 10                                                                                                          
      • Adding new paragraph (9) to AS 21.23.260 that                                                                           
         states "require that a third-party service provider                                                                    
         that has access  to or holds  nonpublic information                                                                    
         notify  the  insurer   of  a   cybersecurity  event                                                                    
         involving nonpublic information as soon as possible                                                                    
         and not  later than three  business days  after the                                                                    
         third-party  service  provider  determines  that  a                                                                    
         cybersecurity event  has occurred; for  purposes of                                                                    
         this paragraph, encrypted  nonpublic information is                                                                    
         not considered accessible to or  held by the third-                                                                    
         party service provider if the associated protective                                                                    
         process or key  necessary to assign meaning  to the                                                                    
         nonpublic information is not  within the possession                                                                    
         of the third-party service provider;"                                                                                  
                                                                                                                                
     Conforming changes:                                                                                                        
      • Renumbering                                                                                                             
      • Page 17, line 20                                                                                                      
         • Including the new paragraph  (9) to  AS 21.23.260                                                                    
          to list of items to take effect January 1, 2026.                                                                      
                                                                                                                                
2:36:56 PM                                                                                                                    
SENATOR KIEHL joined the meeting.                                                                                               
                                                                                                                                
2:37:53 PM                                                                                                                    
CHAIR CLAMAN solicited a motion.                                                                                                
                                                                                                                                
2:37:59 PM                                                                                                                    
SENATOR TOBIN moved to adopt the committee substitute (CS) for                                                                  
SB 134, work order 33-LS0253\D, as the working document.                                                                        
                                                                                                                                
2:38:15 PM                                                                                                                    
CHAIR CLAMAN found no objections and CSSB 134, version D, was                                                                   
adopted as the working document.                                                                                                
                                                                                                                                
[SB 134 was held in committee.]