1. (a) Signatory. An authorized signatory may not allow another individual to use the electronic signature device unique to his or her electronic signature.

2. (b) Unique signature device. When the electronic signature device is used to create an individual's electronic signature, the code or mechanism must be unique to that individual at the time the signature is created and the individual must be uniquely entitled to use it. The signatory shall:

   1. (1) protect the electronic signature device from compromise; and
   2. (2) report to the DEQ, within one business day of discovery, any evidence that the security of the device has been compromised.

Added at 24 Ok Reg 1506, eff 6-15-07