Information Security Incident reports shall be submitted to the MGA for the following instances:
- Any breach of the licensee’s information security that adversely affects the confidentiality of information related to players; and
- Any breach of the licensee’s information security that precludes players from accessing their accounts for a period exceeding twelve (12) hours.