Each licensee or sports wagering services provider shall implement, maintain, regularly review and revise, and comply with a comprehensive information security management system, to take reasonable steps to protect the confidentiality, integrity, and availability of personal identifying information of individuals who place a wager with the licensee or sports wagering services provider. The system shall contain administrative, technical, and physical safeguards appropriate to the size, complexity, nature, and scope of the operations and the sensitivity of the personal identifying information owned, licensed, maintained, handled, or otherwise possessed by the licensee or sports wagering services provider. Additional specifications may be adopted by the commission through internal control procedures.
S.D. Admin. R. 20:18:35.01:11
General Authority: SDCL 42-7B-7, 42-7B-11(13).
Law Implemented: SDCL 42-7B-43.