# 806 KAR 3:230: 806 KAR 3:230. Standards for safeguarding customer information

> Kentucky · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R230

## Section

- **Citation:** 806 KAR 3:230
- **Heading:** 806 KAR 3:230. Standards for safeguarding customer information
- **Jurisdiction:** Kentucky
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** Kentucky Administrative Regulations / Title 806 (Public Protection Cabinet - Department of Insurance) / Chapter 003 / 806 KAR 3:230

## Text

Section 1. Definitions. (1) "Consumer" means an individual who seeks to obtain, obtains, or has obtained an insurance product or service from a licensee that is to be used primarily for personal, family, or household purposes, and about whom the licensee has nonpublic personal information; or that individual's legal representative. (2) "Customer" means a consumer who has a customer relationship with a licensee. (3) "Customer information" means nonpublic personal information about a customer, whether in paper, electronic or other form, that is maintained by or on behalf of the licensee. (4) "Customer relationship" means a continuing relationship between a consumer and a licensee under which the licensee provides one (1) or more insurance products or services to the consumer that are to be used primarily for personal, family, or household purposes. (5) "Licensee" means all insurers holding a certificate of authority, licensed producers, companies, or business entities licensed or required to be licensed, or authorized or required to be authorized, or registered, excluding service contract makers, or required to be registered pursuant to the Kentucky Insurance Code. Section 2. Information Security Program. Each licensee shall implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of customer information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the licensee and the nature and scope of its activities. Section 3. Objectives of Information Security Program
information security program that includes administrative, technical, and physical safeguards for the protection of customer information. The administrative, technical, and physical safeguards included in the information security program shall be appropriate to the size and complexity of the licensee and the nature and scope of its activities. Section 3. Objectives of Information Security Program. A licensee's information security program shall be designed to: (1) Ensure the security and confidentiality of customer information; (2) Protect against any anticipated threats or hazards to the security or integrity of the information; and (3) Protect against unauthorized access to or use of the information that may result in substantial harm or inconvenience to any customer. Section 4. Determined Violation. A violation of this administrative regulation may constitute an unfair trade practice in the business of insurance and shall subject the licensee to a civil penalty authorized by KRS 304.99-020.

## Nearby sections

- [806 KAR 3:110 806 KAR 3:110. Authorization](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R110.md)
- [806 KAR 3:150 806 KAR 3:150. Standards for consideration of a hazardous financial condition](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R150.md)
- [806 KAR 3:160 806 KAR 3:160. Life and health reinsurance agreements](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R160.md)
- [806 KAR 3:170 806 KAR 3:170. Annual audited financial reports](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R170.md)
- [806 KAR 3:190 806 KAR 3:190. Risk-based capital for insurers](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R190.md)
- [806 KAR 3:210 806 KAR 3:210. Privacy of consumer financial and health information](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R210.md)
- [806 KAR 3:230 806 KAR 3:230. Standards for safeguarding customer information](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R230.md)
- [806 KAR 3:240 806 KAR 3:240. Corporate governance annual disclosure](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R240.md)
- [806 KAR 3:250 806 KAR 3:250. Cybersecurity reporting procedures](https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R250.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_KY_KAR_T806_C003_R230. Check the current official text before relying on it. Not legal advice.