(1) Effective date. These rules are effective July 1, 2001.

(2)(a) Notice requirement for consumers who are the licensee's customers on the compliance date. By July 1, 2001, a licensee shall provide an initial notice, as required by WAC 284-04-200, to consumers who are the licensee's customers on July 1, 2001.

(b) Example. A licensee provides an initial notice to consumers who are its customers on July 1, 2001, if, by that date, the licensee has established a system for providing an initial notice to all new customers and has mailed the initial notice to all the licensee's existing customers.

(3) Two-year grandfathering of service agreements. Until July 1, 2002, a contract that a licensee has entered into with a nonaffiliated third party to perform services for the licensee or functions on the licensee's behalf satisfies the provisions of WAC 284-04-400 (1)(a)(ii), even if the contract does not include a requirement that the third party maintain the confidentiality of nonpublic personal information, as long as the licensee entered into the agreement on or before January 9, 2001.

(4) With respect to nonpublic personal health information under WAC 284-04-510, these rules are effective December 30, 2002.