Wisconsin § 601.953 Investigation of cybersecurity event.

Wisconsin Statutes

§ 601.953 — Investigation of cybersecurity event.

Wisconsin § 601.953

Ch. 601Insurance — administration

Subch.subch. IX of ch. 601 SUBCHAPTER IX

INSURANCE DATA SECURITY

This text of Wisconsin § 601.953 (Investigation of cybersecurity event.) is published on Counsel Stack Legal Research, covering Wisconsin primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Wis. Stat. § 601.953 (2026).

Text

953
953(1) (1) If a licensee learns that a cybersecurity event involving the licensee’s information systems or nonpublic information has or may have occurred, the licensee, or an outside vendor or service provider designated to act on behalf of the licensee, shall conduct a prompt investigation that, at a minimum, includes all of the following:
953(1)(a) (a) An assessment of the nature and scope of the cybersecurity event.
953(1)(b) (b) The identification of any nonpublic information that was or may have been involved in the cybersecurity event.
953(1)(c) (c) The performance of reasonable measures to restore the security of the licensee’s information systems compromised in the cybersecurity event and prevent additional unauthorized acquisition, release, or use of nonpub

Free access — add to your briefcase to read the full text and ask questions with AI

601.953
601.953(1) (1) If a licensee learns that a cybersecurity event involving the licensee’s information systems or nonpublic information has or may have occurred, the licensee, or an outside vendor or service provider designated to act on behalf of the licensee, shall conduct a prompt investigation that, at a minimum, includes all of the following:
601.953(1)(a) (a) An assessment of the nature and scope of the cybersecurity event.
601.953(1)(b) (b) The identification of any nonpublic information that was or may have been involved in the cybersecurity event.
601.953(1)(c) (c) The performance of reasonable measures to restore the security of the licensee’s information systems compromised in the cybersecurity event and prevent additional unauthorized acquisition, release, or use of nonpublic information.
601.953(2) (2) If a licensee knows that a cybersecurity event has or may have occurred in an information system maintained by a 3rd-party service provider, the licensee shall comply with sub. (1) or make reasonable efforts to confirm and document that the 3rd-party service provider has either complied with sub. (1) or failed to cooperate with the investigation under sub. (1) .
601.953(3) (3) The licensee shall maintain records concerning a cybersecurity event for a period of at least 5 years starting from the date of the cybersecurity event and shall produce the records upon demand of the commissioner.