Company: KNSL
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0001669162-25-000010
Chunk: 24

Company: Kinsale Capital Group, Inc.
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1
Chunk 24
---
 ORSA Model Act as adopted in its domicile of Arkansas.

Additionally, in response to the growing threat of cyber-attacks in the insurance industry, certain jurisdictions have begun to consider new cybersecurity measures, including the adoption of cybersecurity regulations which, among other things, would require insurance companies to establish and maintain a cybersecurity program and implement and maintain cybersecurity policies and procedures. On October 24, 2017, the NAIC adopted its Insurance Data Security Model Law, intended to serve as model legislation for states to enact in order to govern cybersecurity and data protection practices of insurers, insurance agents, and other licensed entities registered under state insurance laws (Arkansas has not yet adopted this model legislation). The New York State Department of Financial Services ("DFS") issued regulations governing cybersecurity requirements for financial services companies, which became effective on March 1, 2017, and, as currently amended, require insurance companies, among others, regulated in New York to assess their specific cyber risk profiles and design cyber security programs to address such risks. We annually file our program compliance certifications pertaining to the DFS cybersecurity requirements in New York.

Federal and state legislative and regulatory changes

The U.S. federal government’s oversight of the insurance industry was expanded under the Dodd-Frank Act. Prior to the enactment of the Dodd-Frank Act in July 2010, the U.S. federal government’s regulation of the insurance industry was essentially limited to certain insurance products, such as flood insurance, multi-peril crop insurance and reinsurance of losses from terrorism. As part of the overall federal financial regulatory reform package contained in the Dodd-Frank Act, Congress has legislated reforms in the surplus lines sector (among others).

The Dodd-Frank Act incorporates the Nonadmitted and Reinsurance Reform Act of 2010 ("NRRA"), which became effective on July 21, 2011. Among other things, the NRRA establishes national uniform standards on how states may regulate and tax surplus lines insurance and sets national standards concerning the regulation of reinsurance. In particular, the NRRA gives regulators in the home state of an insured exclusive authority to regulate and tax surplus lines insurance transactions, and regulators in a ceding insurer’s state of domicile the sole responsibility for regulating the balance sheet credit that the ceding insurer may take for reinsurance recoverables.

16

The Dodd-Frank Act also established the FIO in the U.S. Department of the Treasury and vested the FIO with the authority to monitor all aspects of the insurance sector, monitor the extent to which traditionally underserved communities and consumers have access