R590-216-2. Purpose and Scope

(1) The purpose of this rule is to establish standards to assist a licensee in developing and implementing administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of customer information under the Gramm-Leach-Bliley Act, 15 U.S.C. 6801, 6805(b), and 6807. (2) This rule applies to a licensee of the department that obtains any nonpublic information from a customer, including: (a) nonpublic personal financial information; or (b) nonpublic personal health information.