The US National Association of Insurance Commissioners has released a draft cyber security “bill of rights” that sets standards to help consumers if personal information is compromised.

The association – which is working with state regulators to check insurance companies are taking steps to protect sensitive data – expects to adopt the standards within 30 days.

“Ramping up our efforts in this critical area will help state insurance departments better address the threat and responses to cyber breaches,” the association’s President and Montana insurance commissioner Monica Lindeen said. “Understanding what regulators, consumers and companies can do to craft best practices will help minimise the impact on insurance consumers and the insurance industry in the long term.”