1. (a) Within 72 hours of discovery of a reportable incident, a technology provider shall notify the Department.

2. (b) For purposes of the rules in this Section of this Subchapter, a reportable incident is one that involves:

   1. (1) a technology provider's electronic notary solution, a notary public's records, an electronic notary's electronic seal or signature, or a principal's records or information;

   2. (2) any of the following affecting data or access:

      1. (A) unauthorized access, use, alteration, or disclosure;
      2. (B) theft;
      3. (C) loss; or
      4. (D) compromise; or
   3. (3) a cybersecurity incident.

History Note: Authority G.S. 10B-4; 10B-106; 10B-125(b); 10B-126; 10B-134.15; 10B-134.17; 10B-134.19; 10B-134.21; 10B-134.23;
Eff. July 1, 2025.