Louisiana Administrative Code
Title 42 - LOUISIANA GAMING
Part XV - Lottery
Chapter 11 - Lottery Sports Wagering
Subchapter E - Computer Systems and Sports Wagering Platforms; Security
Section XV-1167 - Information Security Management and Data Security

Universal Citation: LA Admin Code XV-1167

Current through Register Vol. 50, No. 9, September 20, 2024

A. The operator shall implement, maintain, regularly review and revise, and comply with a comprehensive Information Security Management System (ISMS), the purpose of which shall be to take reasonable steps to protect the confidentiality, integrity, and availability of personal identifying information of individuals who place a wager with the operator, and shall contain administrative, technical, and physical safeguards appropriate to the size, complexity, nature, and scope of the operations and the sensitivity of the personal information owned, licensed, maintained, handled, or otherwise in the possession of the operator. Additional ISMS specifications may be adopted by the corporation.

B. The operators shall comply with all applicable state and federal requirements for data security.

C. Logging of Sports Wagering Platform Data

1. The sports wagering platform shall be designed to ensure the integrity and confidentiality of all patron communications and ensure the proper identification of the sender and receiver of all communications. If communications are performed across a public or third-party network, the system shall either encrypt the data packets or utilize a secure communications protocol to ensure the integrity and confidentiality of the transmission.

2. Sports wagering platforms shall employ a mechanism capable of maintaining a separate copy of all of the information required to be logged in this section on a separate and independent logging device capable of being administered by an employee with no incompatible function. If the sports wagering platform can be configured such that any logged data is contained in a secure transaction file, a separate logging device is not required.

3. The operators shall provide upon request, in a format required by the corporation, all online sports betting system data. Sports betting system data includes, but is not limited to, employee data and logs, geo-fence logs, player activity and betting information, and event logs related to the operator-us Louisiana sports wagering operations.

4. Requirements for system specifications and sports wagering platform logging shall be detailed in internal controls.

D. The sports wagering platform shall provide a logical means for securing individual and player data and wagering data, including accounting, reporting, significant event, or other sensitive information, against alteration, tampering, or unauthorized access.

E. The operator shall describe its process for the backup and recovery of the required sports wagering platform data in its approved internal controls. Any changes to the process shall be approved by the corporation prior to the changes being implemented on the platform.

AUTHORITY NOTE: Promulgated in accordance with R.S. 47:9001 et seq.

Disclaimer: These regulations may not be the most recent version. Louisiana may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.