This subpart establishes minimum requirements that apply to administration of the NMLSR by the Conference of State Bank Supervisors or by the Bureau. The NMLSR must accomplish the following objectives:

(a) Provide uniform license applications and reporting requirements for state-licensed loan originators.

(b) Provide a comprehensive licensing and supervisory database.

(c) Aggregate and improve the flow of information to and between regulators.

(d) Provide increased accountability and tracking of loan originators.

(e) Streamline the licensing process and reduce the regulatory burden.

(f) Enhance consumer protections and support anti-fraud measures.

(g) Provide consumers with easily accessible information, offered at no charge, utilizing electronic media, including the Internet, regarding the employment history of, and publicly adjudicated disciplinary and enforcement actions against, loan originators.

(h) Establish a means by which residential mortgage loan originators would, to the greatest extent possible, be required to act in the best interests of the consumer.

(i) Facilitate responsible behavior in the mortgage marketplace and provide comprehensive training and examination requirements related to mortgage lending.

(j) Facilitate the collection and disbursement of consumer complaints on behalf of state and Federal mortgage regulators.

To the extent that CSBS maintains the NMLSR, CSBS must annually provide to the Bureau, and the Bureau will annually collect and make available to the public, NMLSR financial statements, audited in accordance with Generally Accepted Accounting Principles (GAAP) promulgated by the Federal Accounting Standards Advisory Board, and other data. These financial statements and other data shall include, but not be limited to, the level and categories of funds received in relation to the NMLSR and how such funds are spent, including the aggregate total of funds paid for system development and improvements, the aggregate total of salaries and bonuses paid, the aggregate total of other administrative costs, and detail on other money spent, including money and interest paid to reimburse system investors or lenders, and a report of each state's activity with respect to the NMLSR, including the number of licensees, the state's financial commitment to the system, and the fees collected by the state through the NMLSR.

(a) To the extent that CSBS, AARMR, or their successors maintain the NMLSR, CSBS, AARMR, and their successors, as applicable, must complete a background check on their employees, contractors, or other persons who have access to loan originators' Social Security Numbers, fingerprints, or any credit reports collected by the system.

(b) To the extent that CSBS, AARMR, or their successors maintain the NMLSR, CSBS, AARMR, and their successors as applicable, must keep and adhere to an appropriate information security and privacy policy. If the NMLSR forms a reasonable belief that a security breach has occurred, it shall notify affected parties, as soon as practicable, including the Bureau, any loan originator or registrant whose data may have been compromised, and the employer of the loan originator or registrant, if such employer is also licensed through the system.

CSBS, AARMR, or the Bureau, as applicable, may charge reasonable fees to cover the costs of maintaining and providing access to information from the Nationwide Mortgage Licensing System and Registry. Fees shall not be charged to consumers for access to such system and registry. If the Bureau determines to charge fees, the fees to be charged shall be issued by notice with the opportunity for comment prior to any fees being charged.

The Bureau or any organization serving as the administrator of the Nationwide Mortgage Licensing System and Registry or a system established by the Bureau under 12 U.S.C. 5108 and in accordance with subpart C, or any officer or employee of the Bureau or the Bureau's designee, shall not be subject to any civil action or proceeding for monetary damages by reason of the good-faith action or omission of any officer or employee of any such entity, while acting within the scope of office or employment, relating to the collection, furnishing, or dissemination of information concerning persons who are loan originators or are applying for licensing or registration as loan originators.