Rule 80-3-1-.04 - Notice of Unauthorized Access to Personal Information(1) In the event that a licensee provides notice under applicable federal or state law of an information security incident involving unauthorized access to personal information, then the licensee shall simultaneously provide a duplicate of such disclosure to the Department. For purposes of this rule, personal information is any record containing nonpublic personal information about a customer or potential customer whether in paper, electronic, or other form maintained by or on behalf of the licensee.(2) Pursuant to O.C.G.A. § 10-1-912, a business that satisfies the definition of an information broker is required to provide notice to Georgia residents in the event of a data breach that results in access or likely access to unencrypted personal information. In the event a licensee or an affiliate of a licensee is required to make such notification to Georgia residents, then a duplicate of the notification will simultaneously be submitted to the Department.Ga. Comp. R. & Regs. R. 80-3-1-.04
O.C.G.A. §§ 7-1-61, 7-1-690.
Original Rule entitled "Financial Statements" adopted. F. June 2, 1977; eff. June 22, 1977.Repealed: New Rule entitled "Reports of Large Currency Transactions" adopted. F. Sept. 4, 1990; eff. Sept. 24, 1990.Amended: F. Nov. 2, 1994; eff. Nov. 22, 1994.Amended: Rule retitled "Reports of Large Currency Transactions by Check Cashers, Check Sellers and Other Money Transmitters". F. Aug. 26, 1997; eff. Sept. 15, 1997.Amended: Rule retitled "Reports of Large Currency Transactions, Recordkeeping, and Suspicious Activity Reporting Requirements for Check Cashers, Check Sellers and Money Transmitters". F. July 28, 2003; eff. August 17, 2003.Amended: F. Aug. 22, 2006; eff. Sept. 11, 2006.Amended: Title changed to "Reports of Large Currency Transactions, Recordkeeping, and Suspicious Activity Reporting Requirements for Check Cashers, Payment Instrument Sellers and Money Transmitters." F. Jun. 10, 2014; eff. Jun. 30, 2014.Amended: F. June 27, 2018; eff. July 17, 2018.Repealed: F. Dec. 16, 2021; eff. Jan. 5, 2022.Adopted: New Rule entitled "Notice of Unauthorized Access to Personal Information." F. July 7, 2022; eff. July 27, 2022.