On March 26, the Virginia governor signed HB 2389, which permits mortgage lenders and mortgage brokers to allow employees and exclusive agents to work remotely provided certain conditions are met. Requirements to conduct business out of a remote location include: (i) the establishment of written policies and procedures for remote work supervision; (ii) ensuring access to platforms and customer information adheres to the licensee’s comprehensive written information security plan; (iii) the employment of appropriate risk-based monitoring and oversight processes, as well as the agreement from employees or exclusive agents who will work remotely to comply with these established practices; (iv) banning in-person customer interaction at an employee’s or exclusive agent’s residence unless the residence is an approved office; (v) the proper maintenance of physical records; (vi) compliance with federal and state security requirements when engaging in customer interactions and conversations; (vii) access to the licensee’s secure systems via a virtual private network or comparable system with password protection; (viii) the installation and maintenance of security updates, patches, or other alterations; (ix) “the ability to remotely lock or erase company-related contents of any device or otherwise remotely limit access to a licensee’s secure systems”; and (x) the designation of the principal place of business as the mortgage loan originator’s registered location for the purposes of the Nationwide Mortgage Licensing System and Registry record, “unless such mortgage loan originator elects an office as a registered location.” The amendments also add definitions for “office” and “remote location.” The Act is effective July 1.
This content originally appeared in the InfoBytes blog, a collection of news and alerts covering legal and regulatory developments for the financial services industry. To read more or have the InfoBytes weekly newsletter delivered to your inbox, please visit infobytesblog.com.