KRS 286.13-030: Regulatory registry -- Submission of filings -- Requests for reports and

protocols -- Relationships with affiliated entities -- Agent for distributing

information. (Effective April 30, 2027)

(1) As used in this section, "registry" means the S tate Regulatory Registry, LLC, or its

successor organization.

(2) When an application, report, or approval request is required to be filed with the

commissioner under this subtitle, the commissioner may require that the filing,

including any applicable fees and supporting documentation, be submitted to:

(a) The registry or its successor organization;

(b) The registry's parent, affiliate, or operating subsidiary; or

(c) Other agencies or authorities as part of a nationwide licensing system;

which may act as an agent for receiving, requesting, and distributing information to

and from any source directed by the commissioner.

(3) The commissioner:

(a) May report violations of this subtitle, enforcement actions, and other relevant

information that the commission er deems necessary to carry out the purpose

of this section to the registry or its affiliated entities; and

(b) Shall establish a process whereby licensees may challenge information

entered into the registry by the commissioner.

(4) The commissioner shall annually request:

(a) Audited financial reports, including inquiring as to the budget and fees

collected, both proposed and actual, from the registry; and

(b) Any nonconfidential protocols or reports for the security and safeguarding of

personal information maintained by the registry, including inquiring as to:

1. Whether the system has implemented and complied with the data

security guidelines set forth in the Gramm-Leach-Bliley Act, 15 U.S.C.

sec. 6801;

2. The results of any nonconfidential periodic data protection audits that

the system may conduct; and

3. Whether any security breaches have occurred resulting in the substantial

likelihood that personal information may be misused or stolen.

(5) The commissioner may establish relationships and contracts with other

governmental agencies or entities affiliated with the registry that the commissioner

deems necessary to carry out this section.

(6) For purposes of thi s section, the commissioner may use other governmental

agencies or the registry or its affiliated entities as an agent for requesting

information from, and distributing information to, the United States Department of

Justice or other governmental agencies.