When a person, including a nonresident of this state, engages in conduct prohibited or made actionable by this act or a rule or order hereunder, whether or not the person has filed a consent to service of process, and personal jurisdiction over the person cannot otherwise be obtained in this state, that conduct shall be considered equivalent to an appointment of the the corporations and securities bureau of the department of commerce to be his or her attorney to receive service of a lawful process in any noncriminal action or proceeding against the person or a successor, executor, or administrator which grows out of that conduct and which is brought under this act or any rule or order hereunder, with the same force and validity as if served on the person personally. Service may be made by leaving a copy of the process in the office of the corporations and securities bureau of the department of commerce, but it is not effective unless the plaintiff, which may be the department in an action or proceeding instituted by it, forthwith sends notice of the service and a copy of the process by certified mail to the defendant or respondent at his or her last known address or takes other steps which are reasonably calculated to give actual notice and the plaintiff’s affidavit of compliance with this section is filed in the case on or before the return day of the process, if any or within such further time as the court allows.