KRS 286.12-090: Cooperation with commissioner by State Regulatory Registry and other

agencies.

(1) As used in this section, "registry" means the State Regulatory Registry, LLC, or its

successor organization.

(2) When an application, report, or approval re quest is required to be filed with the

commissioner under this subtitle, the commissioner may require, by administrative

regulation or order, that the filing, including any applicable fees and supporting

documentation, be submitted to:

(a) The registry or its successor organization;

(b) The registry's parent, affiliate, or operating subsidiary; or

(c) Other agencies or authorities as part of a nationwide licensing system, which

may act as an agent for receiving, requesting, and distributing information to

and from any source directed by the commissioner.

(3) The commissioner:

(a) May report violations of this subtitle, enforcement actions, and other relevant

information that the commissioner deems necessary to carry out the purpose

of this section to the registry or its affiliated entities; and

(b) Shall establish a process whereby licensees may challenge information entered

into the registry by the commissioner.

(4) The commissioner shall annually request:

(a) Audited financial reports, including inquiring a s to the budget and fees

collected, both proposed and actual, from the registry; and

(b) Any nonconfidential protocols or reports for the security and safeguarding of

personal information maintained by the registry, including inquiring as to:

1. Whether th e system has implemented and complied with the data

security guidelines set forth in the Gramm -Leach-Bliley Act, 15 U.S.C.

sec. 6801;

2. The results of any nonconfidential periodic data protection audits that

the system may conduct; and

3. Whether any security breaches have occurred resulting in the substantial

likelihood that personal information may be misused or stolen.

(5) The commissioner may establish relationships and contracts with other

governmental agencies or entities affiliated w ith the registry that the commissioner

deems necessary to carry out this section.

(6) For purposes of this section, the commissioner may use other governmental

agencies or the registry or its affiliated entities as an agent for requesting

information from, and distributing information to, the United States Department of

Justice or other governmental agencies.