Utah Admin. Code R162-2c-302 - Requirements for the Security, Retention, and Disposal of Records and Customer Information
(1)
(a) An entity licensed under the Utah
Residential Mortgage Practices Act shall maintain and safeguard for the period
set forth in Section
61-2c-302 the following records
and customer information:
(i) application
forms, which include:
(A) the initial 1003
form, signed and dated by the loan originator; and
(B) the final 1003 form, signed and dated by
the loan originator;
(ii) disclosure forms;
(iii) truth-in-lending forms;
(iv) credit reports and the explanations
therefor;
(v) conversation
logs;
(vi) verifications of
employment, paycheck stubs, and tax returns;
(vii) proof of legal residency, if
applicable;
(viii) appraisals,
appraisal addenda, and records of communications between the appraiser and the
registrant, licensee, and lender;
(ix) underwriter denials;
(x) notices of adverse action;
(xi) loan approval;
(xii) name and contact information for the
borrower in the transaction;
(xiii)
pre-qualification and pre-approval letters;
(xiv) other records required by underwriters
involved with the transaction or provided to a lender; and
(xv) customer information acquired in the
application or lending process.
(b) Records may be maintained electronically
if the storage system complies with Title 46 Chapter 04, Utah Uniform
Electronic Transactions Act.
(c) A
licensed entity shall make each record available to the division pursuant to
Subsection
61-2c-302(3).
(d) An individual who terminates sponsorship
with an entity shall turn over to the entity any records and customer
information in the individual's possession when the sponsorship is
terminated.
(2) A person
who disposes of records and customer information at the end of the retention
period shall destroy the records and customer information, including any
personal information by shredding, erasing, or otherwise making the information
indecipherable.
(3)
(a) If a licensed entity is actively engaged
in the business of residential mortgage loans, the PLM is responsible for
proper retention, maintenance, safeguarding, and disposal of records and
customer information.
(b) If a
licensed entity stops doing business in Utah, the control persons as of its
last day of operation are responsible for proper retention, maintenance,
safeguarding, and disposal of records and customer
information.
Notes
State regulations are updated quarterly; we currently have two versions available. Below is a comparison between our most recent version and the prior quarterly release. More comparison features will be added as we have more versions to compare.
(1)
(a) An entity licensed under the Utah Residential Mortgage Practices Act shall maintain and safeguard for the period set forth in Section 61-2c-302 the following records and customer information:
(i) application forms, which include:
(A) the initial 1003 form, signed and dated by the loan originator; and
(B) the final 1003 form, signed and dated by the loan originator;
(ii) disclosure forms;
(iii) truth-in-lending forms;
(iv) credit reports and the explanations therefor;
(v) conversation logs;
(vi) verifications of employment, paycheck stubs, and tax returns;
(vii) proof of legal residency, if applicable;
(viii) appraisals, appraisal addenda, and records of communications between the appraiser and the registrant, licensee, and lender;
(ix) underwriter denials;
(x) notices of adverse action;
(xi) loan approval;
(xii) name and contact information for the borrower in the transaction;
(xiii) pre-qualification and pre-approval letters;
(xiv) other records required by underwriters involved with the transaction or provided to a lender; and
(xv) customer information acquired in the application or lending process.
(b) Records may be maintained electronically if the storage system complies with Title 46 Chapter 04, Utah Uniform Electronic Transactions Act.
(c) A licensed entity shall make each record available to the division pursuant to Subsection 61-2c-302(3).
(d) An individual who terminates sponsorship with an entity shall turn over to the entity any records and customer information in the individual's possession when the sponsorship is terminated.
(2) A person who disposes of records and customer information at the end of the retention period shall destroy the records and customer information, including any personal information by shredding, erasing, or otherwise making the information indecipherable.
(3)
(a) If a licensed entity is actively engaged in the business of residential mortgage loans, the PLM is responsible for proper retention, maintenance, safeguarding, and disposal of records and customer information.
(b) If a licensed entity stops doing business in Utah, the control persons as of its last day of operation are responsible for proper retention, maintenance, safeguarding, and disposal of records and customer information.