11VAC5-70-310. Information security system.
A permit holder shall implement, maintain, regularly review and revise, and comply with a comprehensive information security system, the purpose of which shall be to take reasonable steps to protect the confidentiality, integrity, and availability of personal information of individuals who place a wager with the permit holder, and shall contain administrative, technical, and physical safeguards appropriate to the size, complexity, nature, and scope of the operations and the sensitivity of the personal information owned, licensed, maintained, handled, or otherwise in the possession of the permit holder.
Statutory Authority
§§ 58.1-4007, 58.1-4015.1, and 58.1-4030 through 58.1-4047 of the Code of Virginia.
Historical Notes
Derived from Virginia Register Volume 37, Issue 4, eff. October 12, 2020.