NRS 645F.399: Duty to maintain information security program; requirements.

1. A foreclosure consultant, foreclosure purchaser, loan modification consultant or person performing covered services for compensation shall comply with the requirements set forth in 16 C.F.R. Part 314.

2. In addition to complying with the requirements of 16 C.F.R. Part 314, a foreclosure consultant, foreclosure purchaser, loan modification consultant or person performing covered services for compensation shall:

(a) Maintain the information security program required by 16 C.F.R. § 314.3 as part of the books and records of the consultant, purchaser or person; and

(b) Notify the Commissioner of any notification event in accordance with the regulations adopted by the Commissioner pursuant to NRS 645F.255.

3. As used in this section:

(a) “Information security program” has the meaning ascribed to it in 16 C.F.R. § 314.2.

(b) “Notification event” has the meaning ascribed to it in 16 C.F.R. § 314.2.