# 14 Va. Admin. Code § 5-430-70: 14VAC5-430-70. Consumer notification provisions

> Virginia · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_70

## Section

- **Citation:** 14 Va. Admin. Code § 5-430-70
- **Heading:** 14VAC5-430-70. Consumer notification provisions
- **Jurisdiction:** Virginia
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** Virginia Administrative Code / Title 14 Insurance / Agency 5 State Corporation Commission, Bureau of Insurance / Chapter 430 / 14VAC5-430-70

## Text

A. Licensees, except those exempted under subsection A 1 or A 2 of § 38.2-629 of the Code of Virginia, that determine a cybersecurity event has occurred and has caused or has a reasonable likelihood of causing identity theft or other fraud to consumers whose information was accessed or acquired shall notify those consumers in accordance with § 38.2-626 of the Code of Virginia, subject to any applicable numerical threshold.
B. Each licensee required to notify consumers of a cybersecurity event that does not intend to notify consumers based on a belief that the cybersecurity event does not have a reasonable likelihood of causing identity theft or other fraud to the consumers shall notify the commissioner, without unreasonable delay, of its position and provide an explanation supporting the licensee's position.

## Nearby sections

- [14 Va. Admin. Code § 5-430-10 14VAC5-430-10. Applicability and scope](https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_10.md)
- [14 Va. Admin. Code § 5-430-20 14VAC5-430-20. Severability](https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_20.md)
- [14 Va. Admin. Code § 5-430-30 14VAC5-430-30. Definitions](https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_30.md)
- [14 Va. Admin. Code § 5-430-40 14VAC5-430-40. Information security program risk assessment](https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_40.md)
- [14 Va. Admin. Code § 5-430-50 14VAC5-430-50. Information security program security measures](https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_50.md)
- [14 Va. Admin. Code § 5-430-60 14VAC5-430-60. Reporting cybersecurity events to the commissioner](https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_60.md)
- [14 Va. Admin. Code § 5-430-70 14VAC5-430-70. Consumer notification provisions](https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_70.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/STATE_VA_ADC_14_5_430_70. Check the current official text before relying on it. Not legal advice.