Is a bank, in Washington

WAC 208-690-240, 208-690-250 and 208-690-280 · Read the law's page

• This binds a licensee under the Uniform Money Services Act, chapter 19.230 RCW: a person licensed to engage in money transmission or currency exchange, and a person who fails to obtain a license the chapter requires; declare provides_financial_services if your organization is one. The written-program duty in section 208-690-250 also binds an applicant.
• Establish and maintain an information security program to ensure the availability and functionality of your electronic systems and to protect those systems and any sensitive data stored on them from unauthorized access, use, or tampering. A parent or affiliate may establish and maintain the program as long as you have adopted it and it is available to the Department of Financial Institutions for review.
• Have a written program appropriate to your size and complexity, the activity you conduct, and the sensitivity of the information at issue, that ensures the information's security and confidentiality, protects against anticipated threats or hazards to its security or integrity, and protects against unauthorized access to or use of it, and keep the written plan as part of your books and records.
• Keep, as part of your books and records, a written plan that details your response and recovery to any event that results in damage to or destruction of books and records or a data breach.