Oversight of third-party service provider arrangements.

PennsylvaniaStatutes

Ask Donna

How this section applies to your facts.

PA Code › Title 40 › Chapter 45 › Section 4515

This text was captured on Aug 14, 2026. It is a snapshot, not a live feed, so check the official code before relying on it.

Text

A licensee shall:

(1) Exercise due diligence in selecting its third-party service provider.

(2) Require a third-party service provider to implement appropriate administrative, technical and physical measures to protect and secure the information systems and nonpublic

information that are accessible to, or held by, the third-party service provider. Cross References. Section 4515 is referred to in sections 4514, 4516, 4521, 4532, 4536 of this title.

This is a copy of a public record, reproduced as it was published. It is not legal advice, and it may not be the version a court would rely on. Check the official source before you cite it.

A word about cookies

We need a few to keep you signed in and the library working. The rest help us see which pages people use and where they get stuck. They stay off unless you say yes.