(a) The Interstate Carrier Program partner shall notify the department's Interstate Carrier Program Administrator, of a change in method of compliance with the Interstate Carrier Program (ICP) Security Agreement form, REG 216 I (NEW 11/2017), and/or approved floor plan, no less than 60 days prior to the effective date of the change.

(b) The Interstate Carrier Program partner and its designated employee shall comply with the Information Practices Act of 1977 (section 1798 et seq. of the Civil Code), the Public Records Act (section 6250 et seq. of the Government Code), sections 1808.21 and 1808.47 of the Vehicle Code, sections 11015.5 and 11019.9 of the Government Code and any and all related statutes pertaining to information security.

(c) In the event of a security breach, the Interstate Carrier Program partner must provide, at its own expense, notification to any person or agency to whom a record pertaining personal information has been disclosed as required under Civil Code section 1798.29.