Oversight of third-party service provider arrangements.
40 Pa.C.S. § 4515
in effectA licensee shall:
(1) Exercise due diligence in selecting its third-party service provider.
(2) Require a third-party service provider to implement appropriate administrative, technical and physical measures to protect and secure the information systems and nonpublic
information that are accessible to, or held by, the third-party service provider. Cross References. Section 4515 is referred to in sections 4514, 4516, 4521, 4532, 4536 of this title.
Source: Open US Law by Vaquill AI (CC BY 4.0)URL: https://www.palegis.us/statutes/consolidated/view-statute?txtType=HTM&ttl=40Fetched: 10/16/2026
