{"data":{"id":"us-ky/krs-304.3-766","jurisdiction":"us-ky","citation":"KRS 304.3-766","heading":"Compliance requirements.","body":"(1) A licensee shall be deemed in compliance with KRS 304.3 -750 to 304.3-768 if the\nlicensee:\n(a) 1. Is subject to, governed by, and compliant with the privacy, security, and\nbreach notifications rules issued by the United States Department of\nHealth and Human Services, 45 C.F.R. Parts 160 and 164, as amended,\nestablished pursuant to the Health Insurance Portability and\nAccountability Act of 1996, Pub. L. No. 104 -191, as amended, and the\nHealth Information Technology for Economic and Clinical Health Act,\nPub. L. No. 111-5, as amended;\n2. Maintains nonpublic information in the same manner as protected health\ninformation; and\n3. Submits to the commissioner:\na. An annual written statement certifying its compliance with the\napplicable provisions referenced under sub paragraph 1. of this\nparagraph; and\nb. A copy of any individual breach notification required under 45\nC.F.R. sec. 164.404, as amended, at the same time as all affected\nindividuals; or\n(b) 1. Is a financial institution, as defined in KRS 304.9 -135, that is subject to,\ngoverned by, and compliant with the privacy, security, and breach\nnotification standards issued under Section 501 of the Gramm -Leach-\nBliley Act of 1999, 15 U.S.C. sec. 6801, as amended; and\n2. Submits to the commissioner:\na. An annual written statement certifying its compliance with the\napplicable provisions referenced under subparagraph 1. of this\nparagraph; and\nb. A copy of any breach notification at the same time and in the same\nmanner as not ifications provided to the financial institution's\nfederal regulatory authorities.\n(2) Nothing in subsection (1)(a) of this section shall be construed to restrict the\ncommissioner's authority to examine and investigate the affairs of any licensee\nunder KRS 304.3-762 to verify the licensee's annual certification under this section.","path":[],"source_url":"https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=53299","current_through":"Includes enactments through the 2026 Regular Session","vintage":"09/05/2026","retrieved_at":"2026-09-05T20:57:38Z","sha256":"55796e2d0d6db0b095386117bb438cc8286643b1771bd03197ba49bb85bedbb4","source_id":"us-ky","stale":false,"prev":"us-ky/krs-304.3-764","next":"us-ky/krs-304.3-768"},"notice":"GroundRules: Original legal text. Not legal advice."}