<?xml version="1.0"?>
<law><site_title>Virginia Decoded</site_title><site_url>https://vacode.org</site_url><law_id>81215</law_id><section_number>6.2-1607</section_number><catch_line>Licenses; places of business; changes</catch_line><edition url="https://vacode.org/2025/" slug="2025" current="TRUE" last_updated="">2025</edition><referred_to_by><reference>6.2-1600</reference></referred_to_by><structure><unit label="title" level="1" order_by="1" identifier="6.2">Financial Institutions and Services</unit><unit label="subtitle" level="2" order_by="1" identifier="III">Other Regulated Providers of Financial Services</unit><unit label="chapter" level="3" order_by="1" identifier="16">Mortgage Lenders and Mortgage Brokers</unit></structure><text>
						<section id="A"><p><span class="prefix-number">A.</span> Each license shall state the address of each <span class="dictionary">office</span> at which the business is to be conducted and shall state fully the name of the <span class="dictionary">licensee</span>. Each <span class="dictionary">licensee</span> shall (i) display proof of licensing upon request and (ii) prominently display at any <span class="dictionary">office</span> where the <span class="dictionary">licensee</span> conducts business in <span class="dictionary">person</span> with a borrower or prospective borrower the telephone number and website address for the <span class="dictionary">Commission</span> where borrowers and prospective borrowers may confirm the status of the license. Licenses shall not be transferable or assignable, by operation of <span class="dictionary">law</span> or otherwise. No <span class="dictionary">licensee</span> shall use any name other than the name set forth on the license issued by the <span class="dictionary">Commission</span>. <a id="paragraph-291102" class="section-permalink" href="https://vacode.org/6.2-1607/#A"><i class="fa fa-link"/></a></p></section>
						<section id="B"><p><span class="prefix-number">B.</span> No <span class="dictionary">licensee</span> shall open an additional <span class="dictionary">office</span> without prior approval of the <span class="dictionary">Commission</span>. Applications for such approval shall be made in writing on a form provided by the <span class="dictionary">Commissioner</span> and shall be accompanied by payment of a $150 nonrefundable application fee. The application shall be approved unless the <span class="dictionary">Commission</span> finds that the applicant has not conducted business under this chapter efficiently, fairly, in the public interest, and in accordance with <span class="dictionary">law</span>. The application shall be deemed approved if notice to the contrary has not been mailed by the <span class="dictionary">Commission</span> to the applicant within 30 days of the date the application is received by the <span class="dictionary">Commission</span>. <a id="paragraph-291103" class="section-permalink" href="https://vacode.org/6.2-1607/#B"><i class="fa fa-link"/></a></p></section>
						<section id="C"><p><span class="prefix-number">C.</span> Every <span class="dictionary">licensee</span> shall within 10 days notify the <span class="dictionary">Commissioner</span>, in writing, of the closing of any approved <span class="dictionary">office</span> and of the name, address and position of each new senior officer, member, partner, or director and provide such other information with respect to any such change as the <span class="dictionary">Commissioner</span> may reasonably require. <a id="paragraph-291104" class="section-permalink" href="https://vacode.org/6.2-1607/#C"><i class="fa fa-link"/></a></p></section>
						<section id="D"><p><span class="prefix-number">D.</span> Every license shall remain in force until it expires or has been surrendered, revoked, or suspended. The expiration, surrender, <span class="dictionary">revocation</span>, or suspension of a license shall not affect any preexisting legal right or obligation of such lender or broker. <a id="paragraph-291105" class="section-permalink" href="https://vacode.org/6.2-1607/#D"><i class="fa fa-link"/></a></p></section>
						<section id="E"><p><span class="prefix-number">E.</span> Notwithstanding any other provision of this chapter, a <span class="dictionary">mortgage lender</span> or <span class="dictionary">mortgage broker</span> license shall expire at the end of each calendar year unless it is renewed by a <span class="dictionary">licensee</span> prior to the expiration date. A <span class="dictionary">licensee</span> may renew its license by (i) requesting renewal through the <span class="dictionary">Registry</span> and (ii) complying with any requirements associated with such renewal request that are imposed by the <span class="dictionary">Registry</span>. If a <span class="dictionary">mortgage lender</span> or <span class="dictionary">mortgage broker</span> license has expired, the <span class="dictionary">Commission</span> may by regulation permit the former <span class="dictionary">licensee</span> to seek license reinstatement after the license expiration date by renewing its license in accordance with this subsection and paying a reinstatement fee as prescribed by the <span class="dictionary">Commission</span>. <a id="paragraph-291106" class="section-permalink" href="https://vacode.org/6.2-1607/#E"><i class="fa fa-link"/></a></p></section>
						<section id="F"><p><span class="prefix-number">F.</span> <span class="dictionary">Licensees</span> may allow employees or exclusive agents to work from a <span class="dictionary">remote location</span> if: <a id="paragraph-291107" class="section-permalink" href="https://vacode.org/6.2-1607/#F"><i class="fa fa-link"/></a></p></section>
						<section id="F1" class="indent-1"><p><span class="prefix-number">1.</span> The <span class="dictionary">licensee</span> has written policies and procedures for the supervision of employees or exclusive agents working from a <span class="dictionary">remote location</span>. Such written policies and procedures shall include all the requirements of this subsection; <a id="paragraph-291108" class="section-permalink" href="https://vacode.org/6.2-1607/#F1"><i class="fa fa-link"/></a></p></section>
						<section id="F2" class="indent-1"><p><span class="prefix-number">2.</span> Access to the <span class="dictionary">licensee</span>&#x2019;s platforms and customer information is in accordance with the <span class="dictionary">licensee</span>&#x2019;s comprehensive written information security plan; <a id="paragraph-291109" class="section-permalink" href="https://vacode.org/6.2-1607/#F2"><i class="fa fa-link"/></a></p></section>
						<section id="F3" class="indent-1"><p><span class="prefix-number">3.</span> The <span class="dictionary">licensee</span> employs appropriate risk-based monitoring and oversight processes, and any employee or exclusive agent who will work from a <span class="dictionary">remote location</span> agrees to comply with the <span class="dictionary">licensee</span>&#x2019;s established practices; <a id="paragraph-291110" class="section-permalink" href="https://vacode.org/6.2-1607/#F3"><i class="fa fa-link"/></a></p></section>
						<section id="F4" class="indent-1"><p><span class="prefix-number">4.</span> No in-<span class="dictionary">person</span> customer interaction occurs at an employee&#x2019;s or exclusive agent&#x2019;s residence, unless such residence is an approved <span class="dictionary">office</span>; <a id="paragraph-291111" class="section-permalink" href="https://vacode.org/6.2-1607/#F4"><i class="fa fa-link"/></a></p></section>
						<section id="F5" class="indent-1"><p><span class="prefix-number">5.</span> Physical records are not maintained at a <span class="dictionary">remote location</span>; <a id="paragraph-291112" class="section-permalink" href="https://vacode.org/6.2-1607/#F5"><i class="fa fa-link"/></a></p></section>
						<section id="F6" class="indent-1"><p><span class="prefix-number">6.</span> Customer interactions and conversations about consumers comply with federal and state information security requirements, including applicable provisions under the Gramm-Leach-Bliley Act and the Safeguards Rule established by the Federal Trade <span class="dictionary">Commission</span>, set forth at 16 C.F.R. Part 314, as such requirements may be amended from time to time; <a id="paragraph-291113" class="section-permalink" href="https://vacode.org/6.2-1607/#F6"><i class="fa fa-link"/></a></p></section>
						<section id="F7" class="indent-1"><p><span class="prefix-number">7.</span> Employees or exclusive agents working at a <span class="dictionary">remote location</span> access the <span class="dictionary">licensee</span>&#x2019;s secure systems directly from an out-of-<span class="dictionary">office</span> device, including a laptop, phone, desktop computer, or tablet, via a virtual private network (VPN) or comparable system that ensures secure connectivity and requires a password or other forms of authentication to access; <a id="paragraph-291114" class="section-permalink" href="https://vacode.org/6.2-1607/#F7"><i class="fa fa-link"/></a></p></section>
						<section id="F8" class="indent-1"><p><span class="prefix-number">8.</span> The <span class="dictionary">licensee</span> ensures that appropriate security updates, patches, or other alterations to the security of all devices used at <span class="dictionary">remote locations</span> are installed and maintained; <a id="paragraph-291115" class="section-permalink" href="https://vacode.org/6.2-1607/#F8"><i class="fa fa-link"/></a></p></section>
						<section id="F9" class="indent-1"><p><span class="prefix-number">9.</span> The <span class="dictionary">licensee</span> has the ability to remotely lock or erase company-related contents of any device or otherwise remotely limit access to a <span class="dictionary">licensee</span>&#x2019;s secure systems; and <a id="paragraph-291116" class="section-permalink" href="https://vacode.org/6.2-1607/#F9"><i class="fa fa-link"/></a></p></section>
						<section id="F10" class="indent-1"><p><span class="prefix-number">10.</span> The <span class="dictionary">Nationwide Mortgage Licensing System and Registry</span> record of a <span class="dictionary">mortgage loan</span> originator working from a <span class="dictionary">remote location</span> designates the <span class="dictionary">principal</span> place of business as the <span class="dictionary">mortgage loan</span> originator&#x2019;s registered location, unless such <span class="dictionary">mortgage loan</span> originator elects an <span class="dictionary">office</span> as a registered location. <a id="paragraph-291117" class="section-permalink" href="https://vacode.org/6.2-1607/#F10"><i class="fa fa-link"/></a></p></section></text><history>1987, c. 596, &#xA7; 6.1-416; 1988, c. 303; 1990, c. 8; 1992, c. 283; 2010, c. 794; 2011, c. 435; 2016, cc. 329, 360; 2023, c. 573.</history><metadata></metadata></law>
