(a) If a holder is required to include confidential information in a report to the treasurer, the information must be provided in a secure manner.
Terms Used In Tennessee Code 66-29-181
Contract: A legal written agreement that becomes binding when signed.
Holder: means a person obligated to hold for the account of, or to deliver or pay to, the owner of property that is subject to this part. See Tennessee Code 66-29-102
Record: means information that is inscribed on a tangible medium or that is stored in an electronic or other medium and is retrievable in perceivable form. See Tennessee Code 66-29-102
State: means a state of the United States, the District of Columbia, the Commonwealth of Puerto Rico, the United States Virgin Islands, or any territory or insular possession subject to the jurisdiction of the United States. See Tennessee Code 66-29-102
(b) If confidential information in a record is provided to and maintained by the treasurer and the treasurer’s agent as required by this part, the treasurer and the treasurer’s agent shall:
(1) Implement administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of the information as required by state and federal law; and(2) Protect against reasonably anticipated threats or hazards to the security, confidentiality, or integrity of the information, and against unauthorized access to or use of the information for the purpose of preventing substantial harm or inconvenience to a holder or the holder’s customers, including insureds, annuitants, policy or contract owners, and beneficiaries.(c) The treasurer shall:
(1) Maintain confidential information held pursuant to this part in accordance with security and confidentiality policies prescribed by rule of the department of treasury; and(2) Require that the treasurer’s agent maintain confidential information held pursuant to this part in a secure manner.(d) The treasurer or the treasurer’s agent shall comply, and shall cooperate with a holder, if applicable, in complying with the requirements of § 47-18-2107 regarding the unauthorized acquisition of computerized data.
