Insurance: other; data security enforcement; modify. Amends secs. 553, 561 & 563 of 1956 PA 218 (MCL 500.553 et seq.) & adds secs. 564 & 564a.

SB 549 amends Michigan's Insurance Code to strengthen data security requirements for insurers handling personal information. It requires insurers to notify Michigan residents if their unencrypted personal data (like Social Security numbers or financial account details) was accessed by unauthorized parties, or if encrypted data was accessed with the encryption key. The law also mandates that insurers notify data owners if a breach affects information they own but the insurer maintains. These notifications must be provided without unreasonable delay after determining the breach could cause substantial harm or identity theft. The bill directly affects Michigan residents whose data is held by insurers and the insurers themselves, who must now follow specific breach notification protocols.