This coming year will be an encore performance for the National Association of Insurance Commissioners’ cybersecurity and privacy protections working groups.
After remixing in June 2024, when the Privacy Protections (H) Working Group scrapped its draft new privacy model in favor of starting anew, the group spent 2025 composing (and receiving comments on) its single tracks (i.e., draft sections of its new privacy model). Some harmonies have seemingly been struck (e.g., additional data use restrictions and expanded consumer rights are coming), but production on key tracks, like definitions, remains ongoing, and the group’s release date for its new privacy model album has been extended to fall 2026.
In cybersecurity news, the Cybersecurity (H) Working Group will continue spinning up its Centralized Cybersecurity Event Notification Portal throughout 2026. The group continues tuning its work plan and developing its score regarding which states will be within the portal’s vocal range, which melodies will be included on the reporting form, and how unique state law verses will pair with the one-stop reporting refrain.
There will likely be some discord before these pieces are finalized, but the beat goes on.
