§31-17A-9a. Permitting employees to work from alternate locations.

(a) Notwithstanding any provision of this article to the contrary, but subject to the requirements of this section, employees of a West Virginia mortgage broker, lender, or servicer licensee may perform work for the licensee at their residence: Provided, That nothing in this subsection restricts employees of the licensee from conducting business at other locations for limited periods of time. Any activity conducted by an employee of the West Virginia licensee shall be considered, reported, and regulated as loans of the West Virginia licensee, regardless of the employee's location during the activity.

(b) A licensee, prior to authorizing work by employees at a location other than the licensee's designated place of business, shall ensure the following:

(1) No in-person customer interactions will be conducted at the other location;

(2) The other location is not designated as a business location to consumers or customers;

(3) Appropriate data security and privacy safeguards are in place for licensee and consumer data, information, and records at the other location, including, but not limited to, the use and maintenance of secure virtual private networks and maintenance of appropriate security updates, patches, or other alterations to ensure the security of electronic devices;

(4) Appropriate risk-based monitoring and oversight processes of work performed by the employees of a licensee at the other location are in place, and records of such monitoring and processes are maintained;

(5) No consumer information or records are maintained at the other location;

(6) All consumer and licensee information and records remain accessible and available for regulatory oversight and examinations;

(7) Employees are trained and keep confidential all conversations about, and with, consumers that may be conducted at the other location; and

(8) The other location is a safe and secure workplace for employees.

(c) A licensee, prior to authorizing work at a location other than the licensee's designated place of business, shall establish written policies and procedures to ensure compliance with the requirements of subsection (b) of this section.

(d) A licensee that authorizes work at another location pursuant to this section shall:

(1) Periodically review and document compliance with the provisions of this section and the written policies and procedures established pursuant to subsection (c) of this section as it relates to every employee who works at another location;

(2) Certify annually that the provisions of this section have been met as to each employee working at another location; and

(3) Provide proof of the periodic review and certification upon request by the Division of Financial Institutions.