Utah Code 67-4a-1407. Security breach
Current as of: 2024 | Check for updates
|
Other versions
(1) Except to the extent prohibited by law other than in this chapter, the administrator or the administrator’s agent shall notify a holder as soon as practicable of:
Terms Used In Utah Code 67-4a-1407
- Administrator: means the deputy state treasurer assigned by the state treasurer. See Utah Code 67-4a-102
- Confidential information: means records, reports, and information that is confidential under Section 67-4a-1402. See Utah Code 67-4a-102
- Fraud: Intentional deception resulting in injury to another.
- Holder: means a person obligated to hold for the account of, or to deliver or pay to, the owner property subject to this chapter. See Utah Code 67-4a-102
- Litigation: A case, controversy, or lawsuit. Participants (plaintiffs and defendants) in lawsuits are called litigants.
- Person: means :(28)(a) an individual;(28)(b) an estate;(28)(c) a business association;(28)(d) a public corporation;(28)(e) a government entity;(28)(f) an agency;(28)(g) a trust;(28)(h) an instrumentality; or(28)(i) any other legal or commercial entity. See Utah Code 67-4a-102
- Record: means information that is inscribed on a tangible medium or that is stored in an electronic or other medium and is retrievable in perceivable form. See Utah Code 67-4a-102
- Security: means :
(32)(a) a security as defined in Revised Article 8 of the Uniform Commercial Code; or(32)(b) a security entitlement as defined in Revised Article 8 of the Uniform Commercial Code, including a customer security account held by a registered broker-dealer, to the extent the financial assets held in the security account are not:(32)(b)(i) registered on the books of the issuer in the name of the person for which the broker-dealer holds the assets;(32)(b)(ii) payable to the order of the person;(32)(b)(iii) specifically endorsed to the person; or(32)(b)(iv) an equity interest in a business association not included in this Subsection (32). See Utah Code 67-4a-102(1)(a) a suspected loss, misuse, unauthorized access, disclosure, modification, or destruction of confidential information obtained from the holder in the possession of the administrator or the administrator’s agent; and(1)(b) any interference with operations in any system hosting or housing confidential information that:(1)(b)(i) compromises the security, confidentiality, or integrity of the information; or(1)(b)(ii) creates a substantial risk of identity fraud or theft.(2) Except as necessary to inform an insurer, attorney, investigator, or others as required by law, the administrator and the administrator’s agent may not disclose, without the express consent in a record of the holder, an event described in Subsection (1) to a person whose confidential information was supplied by the holder.(3) If an event described in Subsection (1) occurs, the administrator and the administrator’s agent shall:(3)(a) take action necessary for the holder to understand and minimize the effect of the event and determine the event’s scope; and(3)(b) cooperate with the holder with respect to:(3)(b)(i) any notification required by law concerning a data or other security breach; and(3)(b)(ii) a regulatory inquiry, litigation, or similar action.