Rule 80-3-1-.04. Notice of Unauthorized Access to Personal Information

Rule 80-3-1-.04. Notice of Unauthorized Access to Personal Information

1. (1) In the event that a licensee provides notice under applicable federal or state law of an information security incident involving unauthorized access to personal information, then the licensee shall simultaneously provide a duplicate of such disclosure to the Department. For purposes of this rule, personal information is any record containing nonpublic personal information about a customer or potential customer whether in paper, electronic, or other form maintained by or on behalf of the licensee.
2. (2) Pursuant to O.C.G.A. § 10-1-912, a business that satisfies the definition of an information broker is required to provide notice to Georgia residents in the event of a data breach that results in access or likely access to unencrypted personal information. In the event a licensee or an affiliate of a licensee is required to make such notification to Georgia residents, then a duplicate of the notification will simultaneously be submitted to the Department.

Authority: O.C.G.A. §§ 7-1-61, 7-1-690.

History. Original Rule entitled "Financial Statements" adopted. F. June 2, 1977; eff. June 22, 1977.

Repealed: New Rule entitled "Reports of Large Currency Transactions" adopted. F. Sept. 4, 1990; eff. Sept. 24, 1990.

Amended: F. Nov. 2, 1994; eff. Nov. 22, 1994.

Amended: Rule retitled "Reports of Large Currency Transactions by Check Cashers, Check Sellers and Other Money Transmitters". F. Aug. 26, 1997; eff. Sept. 15, 1997.

Amended: Rule retitled "Reports of Large Currency Transactions, Recordkeeping, and Suspicious Activity Reporting Requirements for Check Cashers, Check Sellers and Money Transmitters". F. July 28, 2003; eff. August 17, 2003.

Amended: F. Aug. 22, 2006; eff. Sept. 11, 2006.

Amended: Title changed to "Reports of Large Currency Transactions, Recordkeeping, and Suspicious Activity Reporting Requirements for Check Cashers, Payment Instrument Sellers and Money Transmitters." F. Jun. 10, 2014; eff. Jun. 30, 2014.

Amended: F. June 27, 2018; eff. July 17, 2018.

Repealed: F. Dec. 16, 2021; eff. Jan. 5, 2022.

Adopted: New Rule entitled "Notice of Unauthorized Access to Personal Information." F. July 7, 2022; eff. July 27, 2022.