Examkin

Question

Difficulty: EasyGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Horizon Protection Partners, an independent insurance agency, is reviewing its data-sharing protocols. Under the Gramm-Leach-Bliley Act (GLBA), in which of the following situations is the agency permitted to disclose a customer's Nonpublic Personal Information (NPI) to a nonaffiliated third party without providing the customer an opportunity to opt out? Select all that apply.

  1. A
    To a third-party telemarketing firm hired to promote a new line of unrelated travel insurance products
  2. To a state department of insurance examiner conducting a routine regulatory compliance auditAnswer
  3. To an independent claims adjustment company contracted to evaluate and process the customer's recent property damage claimAnswer
  4. D
    To an unaffiliated local data broker who wishes to purchase the agency's client list for external retail marketing

Answer

The agency may share NPI without an opt-out opportunity when complying with a regulatory audit (such as by a state insurance examiner) and when processing or servicing a transaction requested by the customer (such as hiring an adjuster for a claim).
The GLBA includes specific exceptions that allow financial institutions to share Nonpublic Personal Information (NPI) without an opt-out requirement. These exceptions include sharing information necessary to process or service a transaction requested by the consumer (such as a claims adjuster processing a claim) and sharing information to comply with federal, state, or local laws and regulatory authorities (such as a state insurance examiner).

Step-by-Step Solution

1
Recall the purpose of the GLBA opt-out requirement.
GLBA generally requires financial institutions to give consumers the right to opt out before sharing their NPI with nonaffiliated third parties.
To protect consumer privacy and give individuals control over how their data is shared.
2
Identify the statutory exceptions to the opt-out rule.
Exceptions include data sharing necessary to process/service a transaction, protect against fraud, or comply with legal/regulatory requirements.
Agencies must be able to perform essential business functions and comply with the law without violating privacy statutes.
3
Evaluate each scenario against the identified exceptions.
The regulatory audit and the claims adjustment process fit the exceptions. The telemarketing and data broker scenarios are strictly promotional/commercial and do not fit any exceptions.
Applying the rules to the scenarios distinguishes permissible essential functions from restricted commercial sharing.

Key Concept

GLBA Opt-Out Exceptions
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic