Ohio Revised Code Search

...(A) If a licensee learns that a cybersecurity event has or may have occurred, the licensee or an outside vendor or service provider designated to act on behalf of the licensee shall conduct a prompt investigation. (B) During the investigation, the licensee or an outside vendor or service provider designated to act on behalf of the licensee shall, at a minimum, do as much of the following as possible: (1) Determin...

...rty to fulfill any of the investigation requirements imposed under section 3965.03 of the Revised Code or notice requirements imposed under this section. (E)(1) In the case of a cybersecurity event involving nonpublic information that is used by or in the possession, custody, or control of a licensee that is acting as an assuming insurer, including an assuming insurer that is domiciled in another state or jurisdict...

...(A) The superintendent of insurance shall have power to examine and investigate into the affairs of any licensee to determine whether the licensee has been or is engaged in any conduct in violation of this chapter. This power is in addition to the powers that the superintendent has under Title XXXIX and Chapters 1739. and 1751. of the Revised Code. (B) Whenever the superintendent has reason to believe that a licens...

... material, or information received with notice or the understanding that it is confidential or privileged under the laws of the jurisdiction that is the source of the document, material, or information. (3) Share documents, materials, or other information subject to division (A) of this section with a third-party consultant or vendor if the consultant or vendor agrees in writing to maintain the confidentiality and ...

...(A) A licensee is exempt from the requirements of section 3965.02 of the Revised Code if it meets any of the following criteria: (1) The licensee has fewer than twenty employees. (2) The licensee has less than five million dollars in gross annual revenue. (3) The licensee has less than ten million dollars in assets, measured at the end of the licensee's fiscal year. (B)(1) A licensee subject to and in complia...

...(A) A licensee that satisfies the provisions of this chapter shall be entitled to an affirmative defense to any cause of action sounding in tort that is brought under the laws of this state or in the courts of this state and that alleges that the failure to implement reasonable information security controls resulted in a data breach concerning nonpublic information. (B) The affirmative defenses permitted under this...

...itute the exclusive state standards and requirements applicable to licensees regarding cybersecurity events, the security of nonpublic information, data security, investigation of cybersecurity events, and notification to the superintendent of cybersecurity events.

...The superintendent of insurance, pursuant to Chapter 119. of the Revised Code, may adopt rules as necessary to carry out the provisions of this chapter.

...The superintendent of insurance shall consider the nature, scale, and complexity of licensees in administering this chapter and adopting rules pursuant to this chapter.

...As used in sections 4116.01 to 4116.04 of the Revised Code: (A) "Public authority" means any officer, board, or commission of the state, or any political subdivision of the state, or any institution supported in whole or in part by public funds, authorized to enter into a contract for the construction of a public improvement or to construct a public improvement by the direct employment of labor. "Public autho...

...A public authority, when engaged in procuring products or services, awarding contracts, or overseeing procurement or construction for public improvements, shall ensure that bid specifications issued by the public authority for the proposed public improvement, and any subsequent contract or other agreement for the public improvement to which the public authority and a contractor or subcontractor are direct parties, do...

...No public authority shall do any of the following: (A) Award a contract for a public improvement in violation of section 4116.02 of the Revised Code; (B) Discriminate against any bidder, contractor, or subcontractor for refusing to become a party to any agreement with any labor organization on the public improvement that currently is under bid or on projects related to that improvement; (C) Otherwise violate secti...

...(A) An interested party may file a complaint against a contracting public authority alleging a violation of section 4116.02 or 4116.03 of the Revised Code within two years after the date on which the contract is signed for the public improvement in the court of common pleas of the county in which the public improvement is performed. The performance of the contract forms the basis of the allegation of a violation. Th...