The administrator shall adopt rules that specify how virtual currency kiosk operators must implement and maintain an information security program. The information security rules must be consistent with the provisions of the federal Gramm-Leach-Bliley Act, 15 United States Code, Section 6801 et seq. (1999), as amended, and the applicable implementing federal regulations as adopted by the Federal Trade Commission. Rules adopted under this subchapter are routine technical rules as defined in Title 5, chapter 375, subchapter 2‑A.   [PL 2025, c. 285, §2 (NEW).]