NRS 676A.640: Provider compliance with federal regulations; provider to maintain information security program and notify Commissioner of notification events.

1. A provider shall comply with the requirements set forth in 16 C.F.R. Part 314.

2. In addition to complying with the requirements set forth in 16 C.F.R. Part 314, a provider shall:

(a) Maintain the information security program required by 16 C.F.R. § 314.3 as part of the books and records of the provider; and

(b) Notify the Commissioner of any notification event pursuant to regulations adopted by the Commissioner pursuant to subsection 4 of NRS 658.105.

3. As used in this section:

(a) “Information security program” has the meaning ascribed to it in 16 C.F.R. § 314.2.

(b) “Notification event” has the meaning ascribed to it in 16 C.F.R. § 314.2.