31 Pa. Code § 146c.4. Objectives of information security program.

§ 146c.4. Objectives of information security program.

A licensee’s information security program shall be designed to do the following:
   (1)  Safeguard the security and confidentiality of customer information.
   (2)  Protect against any reasonably anticipated threats or hazards to the security or integrity of the information.
   (3)  Protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any customer.

Cross References

   This section cited in 31 Pa. Code §  146c.5 (relating to examples of methods of development and implementation); and 31 Pa. Code §  146c.10 (relating to determined violation).

No part of the information on this site may be reproduced for profit or sold for profit.

This material has been drawn directly from the official Pennsylvania Code full text database. Due to the limitations of HTML or differences in display capabilities of different browsers, this version may differ slightly from the official printed version.