(1) As used in this section, “registry” means the State Regulatory Registry, LLC, or its successor organization.
(2) When an application, report, or approval request is required to be filed with the commissioner under this subtitle, the commissioner may require, by administrative regulation or order, that the filing, including any applicable fees and supporting documentation, be submitted to:

Terms Used In Kentucky Statutes 286.12-090

  • Affiliate: means any person who directly, or indirectly through one (1) or more intermediaries, controls, is controlled by, or is under common control with another person. See Kentucky Statutes 286.12-010
  • Commissioner: means the commissioner of the Department of Financial
    Institutions. See Kentucky Statutes 286.1-010
  • Department: means the Department of Financial Institutions. See Kentucky Statutes 286.1-010
  • State: when applied to a part of the United States, includes territories, outlying possessions, and the District of Columbia. See Kentucky Statutes 446.010

(a) The registry or its successor organization;
(b) The registry’s parent, affiliate, or operating subsidiary; or
(c) Other agencies or authorities as part of a nationwide licensing system, which may act as an agent for receiving, requesting, and distributing information to and from any source directed by the commissioner.
(3) The commissioner:
(a) May report violations of this subtitle, enforcement actions, and other relevant information that the commissioner deems necessary to carry out the purpose of this section to the registry or its affiliated entities; and
(b) Shall establish a process whereby licensees may challenge information entered into the registry by the commissioner.
(4) The commissioner shall annually request:
(a) Audited financial reports, including inquiring as to the budget and fees collected, both proposed and actual, from the registry; and
(b) Any nonconfidential protocols or reports for the security and safeguarding of personal information maintained by the registry, including inquiring as to:
1. Whether the system has implemented and complied with the data security guidelines set forth in the Gramm-Leach-Bliley Act, 15 U.S.C. § 6801;
2. The results of any nonconfidential periodic data protection audits that the system may conduct; and
3. Whether any security breaches have occurred resulting in the substantial likelihood that personal information may be misused or stolen.
(5) The commissioner may establish relationships and contracts with other governmental agencies or entities affiliated with the registry that the commissioner deems necessary to carry out this section.
(6) For purposes of this section, the commissioner may use other governmental agencies or the registry or its affiliated entities as an agent for requesting information from, and distributing information to, the United States Department of Justice or other governmental agencies.
Effective: July 14, 2022
History: Created 2022 Ky. Acts ch. 88, sec. 11, effective July 14, 2022.