SB44 revises Nevada law governing a broad range of financial service providers and mortgage servicers. A major portion of the bill requires covered businesses to comply with federal customer-information safeguarding rules in 16 C.F.R. Part 314, maintain written information security programs in their books and records, and notify the appropriate state commissioner when a defined “notification event” occurs. The bill applies these cybersecurity and breach-notification requirements to many licensed entities, including escrow companies, mortgage companies and originators, mortgage servicers, foreclosure-related service providers, collection agencies, deferred deposit and high-interest lenders, title loan and check-cashing businesses, consumer litigation funding companies, earned wage access providers, trust companies, student loan servicers, private education lenders, money transmitters, installment lenders, and debt-management providers.
The bill also creates a new prudential regulatory framework for certain larger mortgage servicers. These “covered institutions” are generally mortgage servicers that service at least 2,000 residential mortgage loans and operate in two or more states. Such institutions must maintain liquidity and operating assets, adopt cash-management and business plans, establish a board of directors or similar governing body, implement corporate governance and internal audit controls, obtain annual independent audits, and maintain a formal risk management program with annual assessments. The Commissioner of Mortgage Lending is authorized to investigate compliance, impose discipline, and in some cases require additional conditions, waive requirements for low-risk institutions, or temporarily suspend the standards during severe events.
The bill’s impact on state law is substantial because it expands regulatory obligations across multiple chapters of Nevada’s financial-services code and directs several commissioners to adopt implementing regulations. It amends licensing and supervision provisions for escrow, mortgage, banking, lending, money transmission, debt-management, and related industries to add breach-notification procedures and cybersecurity recordkeeping requirements. It also updates mortgage-servicer oversight by embedding new financial-condition and governance standards into the existing licensing framework, with explicit exemptions for certain entities such as depository institutions, small servicers, reverse-mortgage-only servicers, and other specified categories.
Overall sentiment appears strongly favorable. The bill passed the Senate unanimously 21-0 and the Assembly unanimously 42-0, indicating broad bipartisan support and little visible opposition in the recorded votes. The absence of committee transcript material suggests no major public controversy was captured in the provided record.
The main points of potential contention are likely to be compliance burden, regulatory scope, and the new prudential standards for large nonbank mortgage servicers. Smaller licensees and industry participants may be concerned about the cost of maintaining formal cybersecurity programs, reporting breaches, and producing audits and governance documentation. Larger mortgage servicers may also view the liquidity, board, audit, and risk-management requirements as significant operational obligations, though the bill includes exemptions and a commissioner waiver/suspension authority that may have helped reduce opposition.
SB44 amends numerous Nevada Revised Statutes chapters to impose cybersecurity, breach-notification, recordkeeping, and governance requirements on a wide range of licensed financial service providers. It requires compliance with federal information-security standards, mandates retention of information security programs as books and records, and directs state regulators to adopt notification procedures for security incidents. It also creates new prudential standards for certain large mortgage servicers, including liquidity, board governance, audit, and risk-management requirements, and authorizes enforcement, examinations, and disciplinary action by the Commissioner of Mortgage Lending.
The recorded legislative sentiment is overwhelmingly positive. The bill passed both chambers unanimously, 21-0 in the Senate and 42-0 in the Assembly, suggesting broad agreement on strengthening cybersecurity and mortgage-servicer oversight. No committee testimony or recorded debate was provided, so there is no evidence in the supplied materials of organized opposition or significant controversy.
The most likely areas of contention are the breadth of the bill’s coverage and the compliance costs it imposes on regulated businesses. Industry participants affected by the new cybersecurity and breach-notification rules may object to added administrative and recordkeeping burdens, while larger mortgage servicers may be concerned about the new liquidity, governance, audit, and risk-management standards. The bill addresses some of these concerns through exemptions for certain entities, including depository institutions, small servicers, reverse-mortgage-only servicers, and other specified categories, and by giving the commissioner discretion to waive or temporarily suspend some requirements.