For purposes of this part, the following definitions apply:

1. (1) “Customer” means a customer as defined in 23 CAR § 30-103(9);

2. (2)

   1. (A) “Customer information” means nonpublic personal information, as defined in 23 CAR § 30-103(21), about a customer, whether in paper, electronic, or other form, that is maintained by or on behalf of the licensee.
   2. (B) For purposes of this part, customer information shall also include nonpublic personal information contained in applications for an insurance product submitted to a licensee by a consumer, as defined in 23 CAR § 30-103(6), regardless of whether the insurance product is ultimately purchased by the consumer;
3. (3) “Customer information systems” means the electronic or physical methods used to access, collect, store, use, transmit, protect, or dispose of customer information;

4. (4) “Licensee” means a licensee as that term is defined in 23 CAR § 30-103(17), except that “licensee” shall not include:

   1. (A) A purchasing group; or
   2. (B) An unauthorized insurer in regard to the excess line business conducted pursuant to Arkansas Code § 23-65-301 et seq.; and
5. (5) “Service provider” means a person that maintains, processes, or otherwise is permitted access to customer information through its provision of services directly to the licensee.