Colorado § 38-13-1406 Security of information

Colorado Statutes

§ 38-13-1406 — Security of information

Colorado § 38-13-1406

Title 38Property -

Art.Revised Uniform Unclaimed Property Act

This text of Colorado § 38-13-1406 (Security of information) is published on Counsel Stack Legal Research, covering Colorado primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

Colo. Rev. Stat. § 38-13-1406 (2026).

Text

(1)If a holder is required to include confidential information in a report to the administrator, the information must be provided by secure means.

(2)If confidential information in a record is provided to and maintained by the administrator or administrator's agent as required by this article 13, the administrator or administrator's agent shall:

(a)Implement administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of the information as required by the law of this state and federal law whether or not the administrator or the administrator's agent is subject to the law;

(b)Protect against reasonably anticipated threats or hazards to the security, confidentiality, or integrity of the information; and

(c)Protect agains

Free access — add to your briefcase to read the full text and ask questions with AI

(1) If a holder is required to include
confidential information in a report to the administrator, the information must be
provided by secure means.

(2) If confidential information in a record is provided to and maintained by
the administrator or administrator's agent as required by this article 13, the
administrator or administrator's agent shall:

(a) Implement administrative, technical, and physical safeguards designed to
protect the security, confidentiality, and integrity of the information as required by
the law of this state and federal law whether or not the administrator or the
administrator's agent is subject to the law;

(b) Protect against reasonably anticipated threats or hazards to the security,
confidentiality, or integrity of the information; and

(c) Protect against unauthorized access to or use of the information that
could result in substantial harm or inconvenience to a holder or the holder's
customers, including insureds, annuitants, and policy or contract owners and their
beneficiaries.

(3) The administrator:

(a) After notice and comment, shall adopt and implement a security plan that
identifies and assesses reasonably foreseeable internal and external risks to
confidential information in the administrator's possession and seeks to mitigate the
risks; and

(b) Shall ensure that an administrator's agent adopts and implements a
similar plan with respect to confidential information in the agent's possession.

(4) The administrator and the administrator's agent shall educate and train
their employees regarding the plan adopted under subsection (3) of this section.

(5) The administrator and the administrator's agent shall in a secure manner
return or destroy all confidential information no longer reasonably needed under
this article 13.