Req. No. 5675 Page 1 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 STATE OF OKLAHOMA 1st Session of the 58th Legislature (2021) HOUSE BILL 2468 By: Lowe (Dick) AS INTRODUCED An Act relating to professions and occupations; ensuring confidentiality of information relating to the alarm and locksmith industry ; requiring custodian to protect certain information; providing for notice if confidential information is compromised; prohibiting certain information from third parties; providing for disciplinary action and civil penalties; providing for codification; an d providing an effective date. BE IT ENACTED BY THE PEOPLE OF THE STATE OF OKLAHOMA: SECTION 1. NEW LAW A new section of law to be codified in the Oklahoma Statutes as Section 1800.19 of Title 59, unless there is created a duplication in numbering, reads as follows: A. A licensee or public entity shall ensure the confidentiality of information obtained from a client and shall not disclose, release to any third-party entities, or distribute information relating to the alarm industry or locksmith industry , notwithstanding emergency responders for dispatching purposes. Information shall not be shared with, stored , or distributed by any third party. Req. No. 5675 Page 2 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 B. Any person who is the custodian of confidential information shall exercise due diligence on an ongoing basis to protect the security of the confidential information including, but not limited to, maintaining current technology to prevent unauthorized access to computers, computer systems, software and computer networks; maintaining adequate safeguards to ensure that confidential information is only distributed to authorized individuals; and conducting employee training in information security measures. C. A person having custody of confidential information shall notify a person if the person's confidential information has been accessed by an unauthorized person or if there has been a breach of the custodian's security measures which may have compromised the security of the person 's confidential information. D. Personal or busin ess information shall not be accessed by, sold to or used by any third party without the written authorization that specifically calls out such conformation of understanding of that person or business. E. Any person, licensee, public entity or third party licensee that fails to comply with the requirements of this section shall be deemed to be engaged in professional misconduct and is subject to disciplinary action and civil penalties. SECTION 2. This act shall become effective November 1, 2021. 58-1-5675 LRB 01/14/21