Where a Cybersecurity Event affects Nonpublic Information held by an insurer, or by a Third-Party Service Provider working for it, and Consumers dealt with the insurer via an independent insurance producer, the insurer tells each affected Consumer's producer of record, as soon as it practicably can and in the way the Commissioner directs. The only excuse is that the insurer does not hold up-to-date producer-of-record details for a given Consumer.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.