---
type: "Bill"
title: "AN ACT relating to insurance data security."
description: "Create new sections of Subtitle 3 of KRS Chapter 304 to establish definitions; require licensees to conduct risk assessments; require licensees to develop an information security program, including an incident response plan; require licensees to investigate cybersecurity events and potential cybersecurity events; establish recordkeeping requirements relating to cybersecurity events; establish reporting requirements relating to cybersecurity events; require licensees to comply with KRS 365.732; provide exceptions for certain provisions; authorize the commissioner to examine and investigate licensees for potential violations and take action necessary to enforce relevant provisions; establish how and under what circumstances documents, materials, or other information may be used or disclosed; prohibit the commissioner or other persons acting on under the authority of the commissioner from testifying in a private civil action concerning confidential documents, materials, or other information; provide that a licensee may be penalized for violations in accordance with KRS 304.99-020; authorize the commissioner to promulgate administrative regulations pursuant to KRS 304.2-110; provide for severability; establish a timeframe for implementation of certain provisions; EFFECTIVE January 1, 2023."
jurisdiction: "us/states/ky"
legislature: "Kentucky General Assembly"
session: "2022RS"
identifier: "HB 474"
citation: "Kentucky HB 474 (2022RS)"
classification: ["bill"]
subjects: ["Effective Dates", "Delayed", "Information Technology", "Insurance"]
status: "enacted"
primary_sponsors: ["M. Pollock"]
version_count: 3
action_count: 27
vote_count: 3
first_action: "2022-02-10T05:00:00+00:00"
last_action: "2022-04-08T04:00:00+00:00"
source: "openstates"
source_identifier: "ocd-bill/171c8289-d03b-4971-ba1d-943398600393"
source_url: "https://apps.legislature.ky.gov/record/22RS/hb474.html"
source_hash: "9833da83b0566f2a238c29bda8cc271b82ca077130cb8457c6bc4065a07a5924"
vintage: "2026-07-01"
source_snapshot: "https://data.openstates.org/daily/2026-07-01/public.pgdump"
retrieved_at: "2026-07-06"
confidence: "reported"
tags: ["legislation", "bill", "us-ky"]
---

# Kentucky HB 474 (2022RS) — AN ACT relating to insurance data security.

Create new sections of Subtitle 3 of KRS Chapter 304 to establish definitions; require licensees to conduct risk assessments; require licensees to develop an information security program, including an incident response plan; require licensees to investigate cybersecurity events and potential cybersecurity events; establish recordkeeping requirements relating to cybersecurity events; establish reporting requirements relating to cybersecurity events; require licensees to comply with KRS 365.732; provide exceptions for certain provisions; authorize the commissioner to examine and investigate licensees for potential violations and take action necessary to enforce relevant provisions; establish how and under what circumstances documents, materials, or other information may be used or disclosed; prohibit the commissioner or other persons acting on under the authority of the commissioner from testifying in a private civil action concerning confidential documents, materials, or other information; provide that a licensee may be penalized for violations in accordance with KRS 304.99-020; authorize the commissioner to promulgate administrative regulations pursuant to KRS 304.2-110; provide for severability; establish a timeframe for implementation of certain provisions; EFFECTIVE January 1, 2023.

## Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. **Introduced** (filed) — [source](https://apps.legislature.ky.gov/recorddocuments/bill/22RS/hb474/orig_bill.pdf)
2. **Acts Chapter 149** (committee substitute) — [source](https://apps.legislature.ky.gov/law/acts/22RS/documents/0149.pdf)
3. **Current/Final** (committee substitute) — [source](https://apps.legislature.ky.gov/recorddocuments/bill/22RS/hb474/bill.pdf)

## Votes

- Final Passage — **pass** (pass) · lower
- PASS HB 474 w/scs1 — **pass** (pass) · lower
- Pass — **pass** (pass) · lower

## Sponsors

- M. Pollock — primary (person)

## Timeline

The legislative action history — every referral, reading, and vote.

- **2022-02-10T05:00:00+00:00** introduced in House `introduction`
- **2022-02-10T05:00:00+00:00** to Committee on Committees (H) `referral-committee`
- **2022-02-15T05:00:00+00:00** to Banking & Insurance (H) `referral-committee`
- **2022-02-16T05:00:00+00:00** reported favorably, 1st reading, to Calendar `committee-passage`
- **2022-02-17T05:00:00+00:00** 2nd reading, to Rules `reading-2`
- **2022-02-17T05:00:00+00:00** posted for passage in the Regular Orders of the Day for Friday, February 18, 2022
- **2022-02-22T05:00:00+00:00** 3rd reading, passed 94-0 `passage, reading-3`
- **2022-02-23T05:00:00+00:00** received in Senate
- **2022-02-23T05:00:00+00:00** to Committee on Committees (S) `referral-committee`
- **2022-03-03T05:00:00+00:00** to Banking & Insurance (S) `referral-committee`
- **2022-03-15T04:00:00+00:00** reported favorably, 1st reading, to Consent Calendar with Committee Substitute (1) `committee-passage`
- **2022-03-16T04:00:00+00:00** 2nd reading, to Rules as a consent bill `reading-2`
- **2022-03-17T04:00:00+00:00** posted for passage in the Consent Orders of the Day for Wednesday, March 23, 2022
- **2022-03-23T04:00:00+00:00** passed over and retained in the Consent Orders of the Day `passage`
- **2022-03-24T04:00:00+00:00** passed over and retained in the Consent Orders of the Day `passage`
- **2022-03-25T04:00:00+00:00** passed over and retained in the Consent Orders of the Day `passage`
- **2022-03-29T04:00:00+00:00** 3rd reading, passed 36-0 with Committee Substitute (1) `passage, reading-3`
- **2022-03-29T04:00:00+00:00** received in House
- **2022-03-29T04:00:00+00:00** to Rules (H) `referral-committee`
- **2022-03-29T04:00:00+00:00** taken from Rules (H)
- **2022-03-29T04:00:00+00:00** posted for passage for concurrence in Senate Committee Substitute (1)
- **2022-03-30T04:00:00+00:00** House concurred in Senate Committee Substitute (1)
- **2022-03-30T04:00:00+00:00** passed 94-0 `passage`
- **2022-03-30T04:00:00+00:00** enrolled, signed by Speaker of the House `passage`
- **2022-03-30T04:00:00+00:00** enrolled, signed by President of the Senate `passage`
- **2022-03-30T04:00:00+00:00** delivered to Governor
- **2022-04-08T04:00:00+00:00** signed by Governor (Acts Ch. 149) `executive-signature`

## Source

OpenStates / OpenCivicData bulk snapshot [2026-07-01](https://data.openstates.org/daily/2026-07-01/public.pgdump); origin `ocd-bill/171c8289-d03b-4971-ba1d-943398600393`. Confidence: reported (aggregated from official Kentucky legislature records).