(a) A licensee that engages in virtual currency business activity must provide to a person who uses the licensee’s products or services the disclosures required by paragraph (b) and any additional disclosure the commissioner by administrative rule determines reasonably necessary to protect persons. The commissioner must determine by administrative rule the time and form required for disclosure. A disclosure required by this section must be made separately from any other information provided by the licensee and in a clear and conspicuous manner in a record the person may keep. A licensee may propose for the commissioner’s approval alternate disclosures as more appropriate for the licensee’s virtual-currency business activity with or on behalf of persons.

(b) Before establishing a relationship with a person, a licensee must disclose, to the extent applicable to the virtual-currency business activity the licensee undertakes with the person:

(1) a schedule of fees and charges the licensee may assess, the manner by which fees and charges are calculated if the fees and charges are not set in advance and disclosed, and the timing of the fees and charges;

(2) whether the product or service provided by the licensee is covered by:

(i) a form of insurance or is otherwise guaranteed against loss by an agency of the United States:

(A) up to the full United States dollar equivalent of virtual currency purchased from the licensee or for control of virtual currency by the licensee as of the date of the placement or purchase, including the maximum amount provided by insurance under the Federal Deposit Insurance Corporation or otherwise available from the Securities Investor Protection Corporation; or

(B) if not provided at the full United States dollar equivalent of virtual currency purchased from the licensee or for control of virtual currency by the licensee, the maximum amount of coverage for each person expressed in the United States dollar equivalent of the virtual currency; or

(ii) private insurance against theft or loss, including cyber theft or theft by other means;

(3) the irrevocability of a transfer or exchange and any exception to irrevocability;

(4) a description of:

(i) liability for an unauthorized, mistaken, or accidental transfer or exchange;

(ii) the person’s responsibility to provide notice to the licensee of the transfer or exchange;

(iii) the basis for any recovery by the person from the licensee;

(iv) general error-resolution rights applicable to the transfer or exchange; and

(v) the method for the person to update the person’s contact information with the licensee;

(5) that the date or time when the transfer or exchange is made and the person’s account is debited may differ from the date or time when the person initiates the instruction to make the transfer or exchange;

(6) whether the person has a right to stop a preauthorized payment or revoke authorization for a transfer, and the procedure to initiate a stop-payment order or revoke authorization for a subsequent transfer;

(7) the person’s right to receive a receipt, trade ticket, or other evidence of the transfer or exchange;

(8) the person’s right to at least 30 days’ prior notice of a change in the licensee’s fee schedule, other terms and conditions of operating the licensee’s virtual-currency business activity with the person, and the policies applicable to the person’s account; and

(9) that virtual currency is not money.

(c) Except as otherwise provided in paragraph (d), at the conclusion of a virtual-currency transaction with or on behalf of a person, a licensee must provide the person a confirmation in a record. The record must contain:

(1) the name and contact information of the licensee, including information the person may need to ask a question or file a complaint;

(2) the type, value, date, precise time, and amount of the transaction; and

(3) the fee charged for the transaction, including any charge for conversion of virtual currency to money, bank credit, or other virtual currency.

(d) If a licensee discloses that it provides a daily confirmation in the initial disclosure under paragraph (c), the licensee may elect to provide a single, daily confirmation for all transactions with or on behalf of a person on that day instead of a per-transaction confirmation.