A licensee’s information security program shall be designed to:
    (1) Ensure the security and confidentiality of customer information;
    (2) Protect against any anticipated threats or hazards to the security or integrity of the information; and,
    (3) Protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any customer.
Rulemaking Authority 624.308(1), 626.9651 FS. Law Implemented 624.307(1), 626.9651 FS. History-New 12-8-02, Formerly 4-128.033.