"Modeled after the Insurance Data Security Model Law issued by the National Association of` Insurance Commissioners, [Puerto Rico Insurance Code] Rule No. 108 requires all insurance companies doing business in Puerto Rico to develop, implement, and periodically update a cybersecurity program reasonably designed to protect the confidentiality, integrity, and availability of the nonpublic information kept in their computer, communications, or information systems and ensure the security of such systems.... Rule No. 108 does not regulate nor impose any requirements on employers doing business in Puerto Rico, their ERISA plan administrative committees, or self- funded employee benefits plans."  MORE >>