1. (1) The purpose of this rule is to establish standards to assist a licensee in developing and implementing administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of customer information under the Gramm-Leach-Bliley Act, 15 U.S.C. 6801, 6805(b), and 6807.

2. (2) This rule applies to a licensee of the department that obtains any nonpublic information from a customer, including:

   1. (a) nonpublic personal financial information; or
   2. (b) nonpublic personal health information.

KEY: insurance

Date of Last Change: June 9, 2023

Notice of Continuation: August 17, 2022

Authorizing, and Implemented or Interpreted Law: 31A-2-201; 31A-2-202; 31A-23a-417; 15 U.S.C. 6801; 15 U.S.C. 6805; 15 U.S.C. 6807