32-9-166. Reports. (1) A licensee shall file a written report with the department through the NMLS within 30 business days of any material change to the information provided in a licensee's application.

(2) A licensee shall file a written report with the department within 1 business day after the licensee has reason to know of the occurrence of any of the following:

(a) the filing of a petition by or against the licensee under the United States Bankruptcy Code, 11 U.S.C. 101, et seq., for bankruptcy or reorganization;

(b) the filing of a petition by or against the licensee for receivership, the commencement of any other judicial or administrative proceeding for the licensee's dissolution or reorganization, or the making of a general assignment for the benefit of the licensee's creditors;

(c) the licensee's decision to cease doing business for any reason;

(d) the commencement of a proceeding to revoke or suspend the licensee's license in a state in which the licensee engages in business or is licensed;

(e) the cancellation or other impairment of the licensee's or an exempt company's bond; or

(f) a felony conviction of the licensee, employee of a licensee, or control person of a licensee.

(3) A licensee shall file a written report with the department through the NMLS within 15 business days after the licensee has reason to know of the occurrence of any of the following:

(a) fraud, theft, or conversion by a borrower against the licensee;

(b) fraud, theft, or conversion by a licensee;

(c) fraud, theft, or conversion by an employee or independent contractor of a licensee;

(d) violation of a provision of 32-9-124;

(e) the discharge of any employee or termination of an independent contractor for dishonest or fraudulent acts;

(f) any administrative, civil, or criminal action initiated against the licensee or any of its control persons by any government entity; or

(g) a cybersecurity incident that affects the licensee's ability to do business or involves access or potential access to a customer's personal information.

(4) (a) In the absence of malice, fraud, or bad faith, a person may not be subjected to civil liability arising from the filing of a complaint with the department or furnishing of other information required by this section or required by the department under the authority granted in this section.

(b) In the absence of malice, fraud, or bad faith, a civil cause of action of any nature may not be brought against a person for any information:

(i) relating to suspected prohibited acts and furnished to or received from law enforcement officials, their agents, or employees or furnished to or received from other regulatory or licensing authorities;

(ii) furnished to or received from other persons subject to the provisions of this part; or

(iii) furnished in complaints filed with the department.