- (1) Effective date. These rules are effective July 1, 2001.
- (2) (a) Notice requirement for consumers who are the licensee's customers on the compliance date. By July 1, 2001, a licensee shall provide an initial notice, as required by WAC 284-04-200, to consumers who are the licensee's customers on July 1, 2001.
- (b) Example. A licensee provides an initial notice to consumers who are its customers on July 1, 2001, if, by that date, the licensee has established a system for providing an initial notice to all new customers and has mailed the initial notice to all the licensee's existing customers.
- (3) Two-year grandfathering of service agreements. Until July 1, 2002, a contract that a licensee has entered into with a nonaffiliated third party to perform services for the licensee or functions on the licensee's behalf satisfies the provisions of WAC 284-04-400 (1)(a)(ii), even if the contract does not include a requirement that the third party maintain the confidentiality of nonpublic personal information, as long as the licensee entered into the agreement on or before January 9, 2001.
- (4) With respect to nonpublic personal health information under WAC 284-04-510, these rules are effective December 30, 2002.
[Statutory Authority: RCW 48.43.505 and Gramm-Leach-Bliley Act, Public Law 102-106, sec. 501(b), sec. 505 (b)(2). WSR 01-03-034 (Matter No. R 2000-08), § 284-04-620, filed 1/9/01, effective 2/9/01.]