# Iowa Code § 507F.10: Cybersecurity event reinsurers

> Iowa · Statutes · In force

URL: https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.10

## Section

- **Citation:** Iowa Code § 507F.10
- **Heading:** Cybersecurity event reinsurers
- **Jurisdiction:** Iowa
- **Kind:** Statutes
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** IA Code / Title XIII / Chapter 507F / Section 507F.10

## Text

(1) If a cybersecurity event involves nonpublic information used by, or that is in the possession, custody, or control of, a licensee that is acting as an assuming insurer and that does not have a direct contractual relationship with consumers affected by the cybersecurity event, the assuming insurer shall notify each of the assuming insurer’s affected ceding insurers and the commissioner of the assuming insurer’s state of domicile within three business days of determining that a cybersecurity event has occurred. A ceding insurer that has a direct contractual relationship with a consumer affected by the cybersecurity event shall comply with the applicable provisions of section 715C.2, and all other applicable notification requirements pursuant to federal or state law.

(2) If a cybersecurity event involves nonpublic information that is in the possession, custody, or control of a third-party service provider of a licensee that is acting as an assuming insurer, the assuming insurer shall notify each of the assuming insurer’s affected ceding insurers and the commissioner of the assuming insurer’s state of domicile within three business days of the date the assuming insurer receives notice from the assuming insurer’s third-party service provider that a cybersecurity event involving nonpublic information has occurred. A ceding insurer that has a direct contractual relationship with a consumer affected by the cybersecurity event shall comply with the applicable provisions of section 715C.2, and all other applicable notification requirements pursuant to federal or state law.

(3) Notwithstanding any law to the contrary, a licensee acting as an assuming insurer shall have no other notice obligations related to a cybersecurity event or other data breach than the notice requirements pursuant to subsections 1 and 2.

2021 Acts, ch 79, §10, 17

## Nearby sections

- [Iowa Code § 507F.1 Title.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.1.md)
- [Iowa Code § 507F.2 Purpose and scope.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.2.md)
- [Iowa Code § 507F.3 Definitions.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.3.md)
- [Iowa Code § 507F.4 Information security program.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.4.md)
- [Iowa Code § 507F.5 Third-party service provider arrangements.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.5.md)
- [Iowa Code § 507F.6 Cybersecurity event investigation.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.6.md)
- [Iowa Code § 507F.7 Cybersecurity event notification and report to the commissioner.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.7.md)
- [Iowa Code § 507F.8 Cybersecurity event notification to consumers.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.8.md)
- [Iowa Code § 507F.9 Cybersecurity event third-party service providers.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.9.md)
- [Iowa Code § 507F.10 Cybersecurity event reinsurers.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.10.md)
- [Iowa Code § 507F.11 Cybersecurity event producers of record.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.11.md)
- [Iowa Code § 507F.12 Confidentiality.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.12.md)
- [Iowa Code § 507F.13 Applicability.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.13.md)
- [Iowa Code § 507F.14 Penalties.](https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.14.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_IA_TXIII_C507F_S507F.10. Check the current official text before relying on it. Not legal advice.