Each licensee, under certain circumstances, shall notify the superintendent within three business days after a determination that an event involving the loss of nonpublic information has occurred. Information regarding reporting a loss of nonpublic information can be found below.
The attached Reporting Loss of Nonpublic Information Workflow is meant to be a guide only. All licensees are responsible for understanding and complying with all sections of R.C. 3965.04 when it comes to reporting a loss of nonpublic information.
When in doubt as to whether to file a notification with ODI, all licensees are strongly encouraged to file and begin a dialogue with ODI as soon as possible.
A Loss of Nonpublic Information Reporting Checklist that can be used in preparation for filing the notification of a loss of nonpublic information with the department is available for your convenience.
This list is not exhaustive. The department has the right at any time to require the submission of additional information and documentation deemed appropriate.
If after a prompt investigation, a licensee determines both a loss of nonpublic information has occurred and that they are required to report the loss, the licensee must notify the department within three business days.
When in doubt as to whether to file a notification with the department, all licensees are strongly encouraged to file and begin a dialogue with the department as soon as possible.
Sending Required Documents/Supplemental Information
It is understood that not all information may be available at the time the licensee is initially required to notify the department. In those instances, licensees must provide in the initial notification an estimation of when any missing information will be available. Licensees have a continuing obligation to update and supplement their notification about material developments relating to the event, including a timeline for providing any outstanding information and for resolving and remediating the event.