Providers may not offer managed security services to a public body in this state unless they are registered with the secretary of state and in good standing.
§2113. Requirements for doing business A. A provider shall not provide managed security services to a public body in this state unless the provider has registered with the secretary of state and remains in good standing. B. Beginning February 1, 2021, each provider that manages a public body's information technology structure, security, or end-user systems in this state shall file an application for initial registration with the secretary of state consisting of the provider's name, address, telephone number, contact person, designation of a person in this state for service of process, and provide a listing of all officers, all directors, and all owners of ten percent or more of the provider. Additionally, the provider shall file a copy of its basic organizational documents, including but not limited to articles of incorporation, articles of organization, articles of association, or partnership agreement. C. A registration shall be effective for two years, unless the registration is denied or revoked. Ninety days prior to the expiration of a registration, a provider shall submit a renewal application on a form prescribed by the secretary of state. D. Each registrant shall notify the secretary of state of any material change in the registration information no later than sixty days after the effective date of such change. The notice shall be accompanied by supporting documentation. E. Notwithstanding any provision of this Section to the contrary, the secretary of state shall not disclose the registration information of any provider that manages a public body's information technology structure, security, or end-user systems in this state, except for a request for disclosure submitted by a public body as defined in R.S. 51:2112. Acts 2020, No. 117, §2, eff. Feb. 1, 2021; Acts 2021, No. 231, §2, eff. June 11, 2021.