1. A provider shall comply with the requirements set forth in 16 C.F.R. Part 314.
2. In addition to complying with the requirements set forth in 16 C.F.R. Part 314, a provider shall:
(a) Maintain the information security program required by 16 C.F.R. § 314.3 as part of the books and records of the provider; and
(b) Notify the Commissioner of any notification event pursuant to regulations adopted by the Commissioner pursuant to subsection 4 of NRS 658.105.
3. As used in this section:
(a) “Information security program” has the meaning ascribed to it in 16 C.F.R. § 314.2.
(b) “Notification event” has the meaning ascribed to it in 16 C.F.R. § 314.2.