La. Admin. Code tit. 42 § III-2805

Current through Register Vol. 50, No. 6, June 20, 2024

Section III-2805 - Notification and Response Time

A. A licensee and casino operator shall provide written notice of the following to the division within 24 hours:

1. discovery that a system or data has been compromised;

2. suspicion or notification from outside sources that a system or data may have been compromised; or

3. determination that a system or data has been otherwise accessed or released without proper authorization.

B. Confirmed breaches of any systems related to the Louisiana properties or any other company owned by common ownership shall be disclosed to the board with 24 hours of confirmation. The notification shall provide all known details at the time of notification including, but not limited to, the location(s) affected and the process that will be used to move forward with the investigation.

C. Upon confirming any release of personal patron data, the licensee and casino operator shall notify the patron(s) affected in accordance with R.S. 51:3074 and notify the board immediately.

La. Admin. Code tit. 42, § III-2805

Promulgated by the Department of Public Safety and Corrections, Gaming Control Board, LR 442016 (11/1/2018).

AUTHORITY NOTE: Promulgated in accordance with R.S. 27:15 and 24.