{"data":{"id":"us-hi/haw.-rev.-stat.-431-3b-205","jurisdiction":"us-hi","citation":"Haw. Rev. Stat. § 431:3B-205","heading":"[ §431:3B-205] Oversight of third-party service provider arrangements.","body":"[ §431:3B-205] Oversight of third-party service provider arrangements. A licensee shall:\n\n(1) Exercise due diligence in selecting its third-party service provider; and\n\n(2) Where appropriate, require a third-party service provider to implement appropriate administrative, technical, and physical measures to protect and secure the information systems and nonpublic information that are accessible to or held by the third-party service provider; provided that encrypted nonpublic information is not accessible to or held by the third-party service provider within the meaning of this paragraph if the third-party service provider does not possess the associated protective process or key necessary to assign meaning to the nonpublic information.","path":["Hawaii Code","Division 2","Title 24","Chapter 431"],"source_url":"http://www.capitol.hawaii.gov/hrscurrent/Vol09_Ch0431-0435H/HRS0431/HRS_0431-0003B-0205.htm","current_through":"2026-08-14","vintage":"open-us-law v2026.08, retrieved 2026-09-14","retrieved_at":"2026-09-14T18:32:11Z","sha256":"c75c40251c3530967d945a14e1cbf76a77308816a6c84f6fc80caa328a29666a","source_id":"us-hi","stale":false,"prev":"us-hi/haw.-rev.-stat.-431-3b-204","next":"us-hi/haw.-rev.-stat.-431-3b-206"},"notice":"GroundRules: Original legal text. Not legal advice."}