The Vermont Insurance Data Security Law applies to licensees—those licensed, authorized to operate or registered, and those required to be licensed, authorized or registered, under Vermont insurance law,and must maintain a comprehensive written information security program