republic-os/legislation/us/states/va/2020/hb-1334.md

---
type: "Bill"
title: "Insurance data security; required programs and notifications."
description: "Insurance data security; required programs and notifications. Establishes standards for insurance data security and for the investigation of a cybersecurity event and the notification to the Commissioner of Insurance and affected consumers of a cybersecurity event. The bill requires insurers to develop, implement, and maintain a comprehensive written information security program based on an assessment of its risk and that contains administrative, technical, and physical safeguards for the protection of nonpublic information and its information system. The bill requires investigation of potential cybersecurity events and prescribes standards for such investigations. The bill requires that the notification of the occurrence of a cybersecurity event provided by an insurer or other entity to the Commissioner and affected consumers to include certain information prescribed by the bill. The bill requires the Commissioner to adopt rules and regulations regarding data security and authorizes the Commissioner to investigate potential violations."
jurisdiction: "us/states/va"
legislature: "Virginia General Assembly"
session: "2020"
identifier: "HB 1334"
citation: "Virginia HB 1334 (2020)"
classification: ["bill"]
subjects: []
status: "enacted"
primary_sponsors: ["Mark L. Keam"]
version_count: 4
action_count: 31
vote_count: 7
first_action: "2020-01-08"
last_action: "2020-03-10"
source: "openstates"
source_identifier: "ocd-bill/fc6dfc3e-ff49-4b49-8667-aa9f77180f18"
source_url: "https://lis.virginia.gov/cgi-bin/legp604.exe?201+sum+HB1334"
source_hash: "2b2549af90ce5fa77169cbc849166e90f063848fa537cdd2da02d3ae60215371"
vintage: "2026-07-01"
source_snapshot: "https://data.openstates.org/daily/2026-07-01/public.pgdump"
retrieved_at: "2026-07-06"
confidence: "reported"
tags: ["legislation", "bill", "us-va"]
---

# Virginia HB 1334 (2020) — Insurance data security; required programs and notifications.

Insurance data security; required programs and notifications. Establishes standards for insurance data security and for the investigation of a cybersecurity event and the notification to the Commissioner of Insurance and affected consumers of a cybersecurity event. The bill requires insurers to develop, implement, and maintain a comprehensive written information security program based on an assessment of its risk and that contains administrative, technical, and physical safeguards for the protection of nonpublic information and its information system. The bill requires investigation of potential cybersecurity events and prescribes standards for such investigations. The bill requires that the notification of the occurrence of a cybersecurity event provided by an insurer or other entity to the Commissioner and affected consumers to include certain information prescribed by the bill. The bill requires the Commissioner to adopt rules and regulations regarding data security and authorizes the Commissioner to investigate potential violations.

## Version chain

The bill's text revisions, in order — the diff chain from filing to enrollment.

1. **Acts of Assembly Chapter text (CHAP0264)** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?201+ful+CHAP0264)
2. **Bill text as passed House and Senate (HB1334ER)** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?201+ful+HB1334ER)
3. **Engrossed by House as amended HB1334E** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?201+ful+HB1334E)
4. **Impact statement from SCC (HB1334)** (committee substitute) — [source](https://lis.virginia.gov/cgi-bin/legp604.exe?201+ful+HB1334)

## Votes

- VOTE: Passage #2 (99-Y 0-N 1-A) — **98–0** (pass) · lower
- Reported from Commerce and Labor (15-Y 0-N) — **15–0** (pass) · upper
- VOTE: Passage (100-Y 0-N) — **99–0** (pass) · lower
- Subcommittee recommends reporting with amendments (9-Y 0-N) — **9–0** (pass) · lower
- Constitutional reading dispensed (39-Y 0-N) — **39–0** (pass) · upper
- Passed Senate (40-Y 0-N) — **40–0** (pass) · upper
- Reported from Communications, Technology and Innovation with amendments (20-Y 0-N) — **20–0** (pass) · lower

## Sponsors

- Mark L. Keam — primary (person)
- Hala S. Ayala — cosponsor (person)

## Timeline

The legislative action history — every referral, reading, and vote.

- **2020-01-08** Prefiled and ordered printed; offered 01/08/20 20104824D `introduction`
- **2020-01-08** Referred to Committee on Communications, Technology and Innovation `referral-committee`
- **2020-01-10** Impact statement from SCC (HB1334)
- **2020-01-16** Assigned CT & I sub: Communications `referral-committee`
- **2020-02-03** House subcommittee amendments and substitutes offered
- **2020-02-03** Subcommittee recommends reporting with amendments (9-Y 0-N)
- **2020-02-03** Reported from Communications, Technology and Innovation with amendments (20-Y 0-N) `committee-passage`
- **2020-02-05** Read first time `reading-1`
- **2020-02-06** Read second time `reading-2`
- **2020-02-06** Committee amendments agreed to
- **2020-02-06** Engrossed by House as amended HB1334E
- **2020-02-06** Printed as engrossed 20104824D-E
- **2020-02-07** Read third time and passed House (100-Y 0-N) `passage, reading-3`
- **2020-02-07** VOTE: Passage (100-Y 0-N)
- **2020-02-07** Reconsideration of passage agreed to by House
- **2020-02-07** Passed House (99-Y 0-N 1-A) `passage`
- **2020-02-07** VOTE: Passage #2 (99-Y 0-N 1-A)
- **2020-02-10** Impact statement from SCC (HB1334E)
- **2020-02-10** Constitutional reading dispensed
- **2020-02-10** Referred to Committee on Commerce and Labor `referral-committee`
- **2020-02-17** Reported from Commerce and Labor (15-Y 0-N) `committee-passage`
- **2020-02-19** Constitutional reading dispensed (39-Y 0-N)
- **2020-02-20** Read third time `reading-3`
- **2020-02-20** Passed Senate (40-Y 0-N) `passage`
- **2020-02-25** Enrolled
- **2020-02-25** Signed by Speaker
- **2020-02-26** Impact statement from SCC (HB1334ER)
- **2020-02-26** Signed by President
- **2020-03-03** Enrolled Bill communicated to Governor on March 3, 2020
- **2020-03-03** Governor's Action Deadline 11:59 p.m., March 10, 2020
- **2020-03-10** Approved by Governor-Chapter 264 (effective 7/1/20) `executive-signature`

## Source

OpenStates / OpenCivicData bulk snapshot [2026-07-01](https://data.openstates.org/daily/2026-07-01/public.pgdump); origin `ocd-bill/fc6dfc3e-ff49-4b49-8667-aa9f77180f18`. Confidence: reported (aggregated from official Virginia legislature records).