32-9-173. Requirements for remote work. (1) Mortgage business may be conducted at a remote work location if:

(a) the licensed mortgage entity's employees and independent contractors do not meet with the public at an unlicensed personal residence;

(b) no physical or electronic business records are maintained at the remote location;

(c) the licensed mortgage entity has written policies and procedures for working remotely and the entity supervises and enforces the policies and procedures;

(d) no signage or advertising of the entity or the mortgage loan originator is displayed at any remote work location;

(e) the licensed mortgage entity maintains the computer system and customer information in accordance with the entity's information technology security plan and all state and federal laws;

(f) any device used to engage in mortgage business has appropriate security, encryption, and device management controls to ensure the security and confidentiality of customer information as required by rules and regulations adopted by the department;

(g) the licensed mortgage entity's employees and independent contractors take reasonable precautions to protect confidential information in accordance with state and federal laws;

(h) the NMLS record of a mortgage loan originator that works remotely designates a properly licensed location as the mortgage loan originator's official workstation and a designated manager as a supervisor; and

(i) the licensed mortgage entity annually reviews and certifies that the employees and independent contractors engaged in mortgage business at a remote location meet the requirements of this section. Upon request, a licensee shall provide written documentation of the licensee's review to the department.

(2) If the commissioner determines that the licensee does not provide reasonable and adequate supervision of the employee, the commissioner shall notify the licensee in writing and within 5 business days of receiving the notice the licensee shall terminate the employee's eligibility to work remotely as provided under this section.

(3) The department shall adopt rules to implement this section.