18 NCAC 07J .0208          notice of reportable incident

(a)  Within 72 hours of discovery of a reportable incident, a technology provider shall notify the Department.

(b)  For purposes of the rules in this Section of this Subchapter, a reportable incident is one that involves:

(1)           a technology provider's electronic notary solution, a notary public's records, an electronic notary's electronic seal or signature, or a principal's records or information;

(2)           any of the following affecting data or access:

(A)          unauthorized access, use, alteration, or disclosure;

(B)          theft;

(C)          loss; or

(D)          compromise; or

(3)           a cybersecurity incident.

History Note:        Authority G.S. 10B-4; 10B-106; 10B-125(b); 10B-126; 10B-134.15; 10B-134.17; 10B-134.19; 10B-134.21; 10B-134.23;

Eff. July 1, 2025.