It is the specific intent of the Congress that this subchapter and subchapter II of this chapter apply to the business of insurance. (j) Insurance agents and brokers. An insurance agent or broker acting under the direction of a party that enters into a contract by means of an electronic record or electronic signature may not be held liable for any deficiency in the electronic procedures agreed to by the parties under that contract if— (1) the agent or broker has not engaged in negligent, reckless, or intentional tortious conduct; (2) the agent or broker was not involved in the development or establishment of such electronic procedures; and (3) the agent or broker did not deviate from such procedures. DEFINITIONS IN § 7006 (1) Consumer The term “consumer” means an individual who obtains, through a transaction, products or services which are used primarily for personal, family, or household purposes, and also means the legal representative of such an individual. (2) Electronic The term “electronic” means relating to technology having electrical, digital, magnetic, wireless, optical, electromagnetic, or similar capabilities. (3) Electronic agent The term “electronic agent” means a computer program or an electronic or other automated means used independently to initiate an action or respond to electronic records or performances in whole or in part without review or action by an individual at the time of the action or response. (4) Electronic record The term “electronic record” means a contract or other record created, generated, sent, communicated, received, or stored by electronic means. (5) Electronic signature The term “electronic signature” means an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record. (6) Federal regulatory agency The term “Federal regulatory agency” means an agency, as that term is defined in section 552(f) of title 5. (7) Information The term “information” means data, text, images, sounds, codes, computer programs, software, databases, or the like. (8) Person
M Mnemonic - A symbol or expression that can help someone remember something. For example, the phrase “Hello! My name is Bill. I'm 9 years old.” might help an individual remember a secure 10-character password of “H!MniBI9yo.” N Network Administrator - The individual responsible for the installation, management, and control of a network. P Passwords - A secret sequence of characters that is used as a means of authentication. Patching - Software code that replaces or updates other code. Frequently patches are used to correct security flaws. Penetration Test - The process of using approved, qualified personnel to conduct real-world attacks against a system so as to identify and correct security weaknesses before they are discovered and exploited by others. Personal Digital Assistant (PDA) - A pocket-sized, special-purpose personal computer that lacks a conventional keyboard. Phishing - A digital form of social engineering that uses authentic-looking — but bogus — to request information from users or direct them to fake Web sites that request information. PKI - Abbreviation for “public key infrastructure.” The use of public key cryptog-raphy in which each customer has a key pair (i.e., a unique electronic value called a public key and a mathematically-related private key). The private key is used to encrypt (sign) a message that can only be decrypted by the cor-responding public key or to decrypt a message previously encrypted with the public key. The public key is used to decrypt a message previously encrypted (signed) using an individual's private key or to encrypt a message so that it can only be decrypted (read) using the intended recipient’s private key. See "Encryption". Pop-Up Box - A dialog box that automatically appears when a person accesses a webpage. Private Key - See "PKI". Proxy Server - An Internet server that controls client computers’ access to the Internet. Using a proxy server, a company can stop employees from accessing undesirable websites, improve performance by storing webpages locally, and hide the internal network's identity so monitoring is difficult for external users. Public Key - See "PKI". R