(a) The superintendent may refuse to renew, revoke, or may suspend for a period the superintendent determines the registration of any consumer credit reporting agency if, after notice and hearing, the superintendent determines that the registrant or any member, principal, officer, director, or controlling person of the registrant, has:

1. (1) violated any insurance, financial service, or banking laws or violated any regulation, subpoena or order of the superintendent or of another state’s insurance or banking commissioner or of any other state or Federal agency with authority to regulate consumer credit reporting agencies, or has violated any law in the course of his or her dealings in such capacity;
2. (2) provided materially incorrect, materially misleading, materially incomplete or materially untrue information in the registration application;
3. (3) failed to comply with the requirements of this Part, including but not limited to, section 201.7 of this Part concerning cybersecurity;
4. (4) used fraudulent, coercive or dishonest practices;
5. (5) improperly withheld, misappropriated or converted any monies or properties received in the course of business in this State or elsewhere;
6. (6) admitted or been found to have committed any unfair trade practice or fraud; or
7. (7) had a consumer credit reporting agency registration, or its equivalent, denied, suspended or revoked in any other state, province, district or territory.