1. The Commissioner may establish by regulation periodic reporting requirements for participants in the Program.
2. On request by the Commissioner, a participant shall make any requested record, information or data available for inspection and copying by the Commissioner.
3. Each participant shall retain, for such time as the Commissioner requires by order or regulation, all records and data produced in the ordinary course of business relating to a qualified insurance product tested in the Program.
4. In addition to providing any other disclosure or notice of the unauthorized acquisition of computerized data required by any applicable statute or regulation, a participant shall promptly notify the Commissioner of any unauthorized acquisition of computerized data constituting a breach of the security of the system data, as that term is defined in NRS 603A.020.