Licensees shall have one year from the effective date of this section to implement sections 4512 (relating to risk assessment), 4513 (relating to information security program), 4514 (relating to corporate oversight) and 4516 (relating to certification) and two years from the effective date of this section to implement section 4515 (relating to oversight of third-party service provider arrangements).
Pennsylvania Legal Code