Amends TCA Title 45, Chapter 13, Part 2.

This bill specifies that a licensed mortgage lender, mortgage loan broker, mortgage loan servicer, or mortgage loan originator may permit an employee to work at a remote location only under 10 conditions, which are detailed in the full text of this bill. For purposes of this bill, "remote location" means a location at which the employees of a licensee may conduct business other than a licensed location, the licensee's principal place of business, or a registered branch office. This bill also specifies that, except as provided in this bill, the Tennessee Residential Lending, Brokerage and Servicing Act does not prohibit an employee of a licensed mortgage lender, mortgage loan broker, mortgage loan servicer, or mortgage loan originator from performing licensable activities at the employee's residence or another remote location in accordance with the licensee's written supervisory policies and procedures.<br /> <br /> ON MARCH 14, 2022, THE HOUSE ADOPTED AMENDMENT #1 AND PASSED HOUSE BILL 2304, AS AMENDED.<br /> <br /> AMENDMENT #1 revises the conditions for remote work under this bill to clarify that access to "licensee" platforms, instead of "company" platforms must be in accordance with the licensee's security plan; to require that data, in addition to customer interactions and conversations about consumers, be in compliance with federal law; and to require that the licensee's principal place of business, instead of the corporate headquarters, be designated as the originator's licensed location. This amendment also deletes the following three of the conditions that were specified in this bill:<br /> <br /> (1) The employee working at the remote location must access the company's secure systems, including a cloud-based system, directly from an out-of-office device, including, but not limited to, a laptop, phone, desktop computer, or tablet, via a virtual private network (VPN) or comparable system that ensures secure connectivity and requires passwords or other forms of authentication to access;<br /> <br /> (2) The licensee ensures that appropriate security updates, patches, or other alterations to the security of all devices used by the employee at the remote location are installed and maintained; and<br /> <br /> (3) The licensee has the ability to remotely lock or erase company-related contents of any device described above in (1) or otherwise remotely limit all access to a company's secure systems.<br />