RSA 420-P:9 Exceptions.

I. The following exceptions shall apply to this chapter:
(a) A licensee with fewer than 20 employees, including any independent contractors, shall be exempt from RSA 420-P:4.
(b) An employee, agent, representative, or designee of a licensee, who is also a licensee, shall be exempt from RSA 420-P:4 and need not develop its own program to the extent that the employee, agent, representative, or designee is covered by the information security program of the other licensee.
(c) A continuing care retirement community, as defined by RSA 420-D, shall be exempt from RSA 420-P:4.
(d) A life settlement provider, as defined by RSA 408-D, shall be exempt from RSA 420-P:4.
(e) A licensee that is a bank or a credit union, as defined in RSA 383-A:2-201, that has establ