; (B) hold capital sufficient for the financial integrity of the digital asset custodian; (C) protect customer assets; (D) establish and maintain books and records regarding the business of the digital asset custodian; (E) submit financial statements and audited financial statements to the applicable supervisor described in subsection (b); (F) provide disclosures to the applicable supervisor described in subsection (b) regarding actions, proceedings, and other items as determined by such supervisor; (G) maintain and enforce policies and procedures for compliance with applicable State and Federal laws, including those related to anti-money laundering and cybersecurity; (H) establish a business continuity plan to ensure functionality in cases of disruption; and (I) establish policies and procedures to resolve complaints. (2) Rulemaking with respect to definitions (A) In general For purposes of this section, the Commission may, by rule, further define the terms adequate supervision and appropriate regulation as necessary in the public interest, as appropriate for the protection of investors, and consistent with the purposes of this Act. (B) Conditional treatment of certain custodians before rulemaking Before the effective date of a rulemaking under subparagraph (A), a trust company is deemed subject to adequate supervision and appropriate regulation if— (i) the trust company is expressly permitted by a State bank supervisor to engage in the custody and safekeeping of digital assets; (ii) the State bank supervisor has established licensing, examination, and supervisory processes that require the trust company to, at a minimum, meet the conditions described in subparagraphs (A) through (I) of paragraph (1)