45-1018.

Licensees; reports; breach of security of the system; notification.

(1) A licensee shall on or before March 1 of each year file with the department a report of the licensee's earnings and operations for the preceding calendar year, and its assets at the end of the year, and giving such other relevant information as the department may reasonably require. The report shall be made under oath and shall be in the form and manner prescribed by the department.

(2) A licensee shall submit a mortgage report of condition as required by section 45-726, on or before a date or dates established by rule, regulation, or order of the director.

(3)(a) Except as provided in subdivisions (b) and (c) of this subsection, a licensee shall notify the director in writing or through the Nationwide Mortgage Licensing System and Registry within three business days from the time that the licensee becomes aware of any breach of security of the system of computerized data owned or licensed by the licensee, which contains personal information about a Nebraska resident, or the unauthorized access to or use of such information about a Nebraska resident as a result of the breach.

(b) If a licensee would be required under Nebraska law to provide notification to a Nebraska resident regarding such incident, then the licensee shall provide a copy of such notification to the department prior to or simultaneously with the licensee's notification to the Nebraska resident.

(c) Notice required by this subsection may be delayed if a law enforcement agency determines that the notice will impede a criminal investigation. Notice shall be made in good faith, without unreasonable delay, and as soon as possible after the law enforcement agency determines that notification will no longer impede the investigation.

(d) For purposes of this subsection, the terms breach of the security of the system and personal information have the same meaning as in section 87-802.