Tennessee Code Title 45. Banks and Financial Institutions § 45-13-212

(1) Access to licensee's platforms and customer information are in accordance with the licensee's comprehensive written information security plan;

(2) In-person customer interactions do not occur at the employee's residence unless the residence is a licensed location;

(3) Physical records are not maintained at the remote location;

(4) Customer interactions, data, and conversations about consumers comply with federal and state information security requirements, including 15 U.S.C. § 6802 and the Safeguards Rule established by the federal trade commission (16 CFR Part 314);  1

(5) The licensee employs appropriate risk-based monitoring and oversight processes and the employee that works from the remote location agrees to comply with the licensee's established processes;

(6) The licensee, at least once annually, certifies that the employee engaging in remote activity meets the appropriate standards and safeguards to continue remote activity; and

(7) If the employee is a mortgage loan originator, the National Mortgaging Licensing System (NMLS) record of the originator that works from the remote location designates the licensee's principal place of business as the originator's licensed location unless the originator elects to choose a licensed branch office as the originator's licensed location.