Kentucky Revised Statutes · § 286.13-030 — Regulatory registry -- Submission of filings -- Requests for reports and protocols -- Relationships with affiliated entities -- Agent for distributing information

(1) As used in this section, "registry" means the State Regulatory Registry, LLC, or its successor organization.

(2) When an application, report, or approval request is required to be filed with the commissioner under this subtitle, the commissioner may require that the filing, including any applicable fees and supporting documentation, be submitted to:

(a) The registry or its successor organization;

(b) The registry's parent, affiliate, or operating subsidiary; or

(c) Other agencies or authorities as part of a nationwide licensing system;

which may act as an agent for receiving, requesting, and distributing information to and from any source directed by the commissioner.

(3) The commissioner:

(a) May report violations of this subtitle, enforcement actions, and other relevant information that the commissioner deems necessary to carry out the purpose of this section to the registry or its affiliated entities; and

(b) Shall establish a process whereby licensees may challenge information entered into the registry by the commissioner.

(4) The commissioner shall annually request:

(a) Audited financial reports, including inquiring as to the budget and fees collected, both proposed and actual, from the registry; and

(b) Any nonconfidential protocols or reports for the security and safeguarding of personal information maintained by the registry, including inquiring as to:

1. Whether the system has implemented and complied with the data security guidelines set forth in the Gramm-Leach-Bliley Act, 15 U.S.C. sec. 6801;

2. The results of any nonconfidential periodic data protection audits that the system may conduct; and

3. Whether any security breaches have occurred resulting in the substantial likelihood that personal information may be misused or stolen.

(5) The commissioner may establish relationships and contracts with other governmental agencies or entities affiliated with the registry that the commissioner deems necessary to carry out this section.

(6) For purposes of this section, the commissioner may use other governmental agencies or the registry or its affiliated entities as an agent for requesting information from, and distributing information to, the United States Department of Justice or other governmental agencies.