Examkin

Question

Difficulty: MediumGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Jonathan contacts an independent producer at Beacon Insurance Group to request a premium quote for a personal life insurance policy. He provides his medical history and financial details for the quote, but ultimately decides not to buy the policy at that time. Six months later, Jonathan returns to Beacon Insurance Group, completes a new application, and purchases a whole life policy.

Under the Gramm-Leach-Bliley Act (GLBA), what is Beacon Insurance Group's obligation regarding the delivery of an initial privacy notice to Jonathan, assuming the agency does not share his nonpublic personal information (NPI) with nonaffiliated third parties during the initial quoting phase?

  1. Beacon must provide an initial privacy notice no later than when Jonathan purchases the policy and establishes a customer relationship.Answer
  2. B
    Beacon must provide an initial privacy notice immediately when Jonathan first provides his medical and financial details for the quote.
  3. C
    Beacon is required to provide an initial privacy notice only if Jonathan explicitly requests to opt out of information sharing after buying the policy.
  4. D
    Beacon must provide the privacy notice within 30 days after the end of the calendar year in which the quoting process occurred.

Answer

The agency must provide an initial privacy notice no later than when the policy is purchased and a customer relationship is established.
Under GLBA, a clear distinction is made between a 'consumer' (who engages in a one-time transaction) and a 'customer' (who has an ongoing relationship). A privacy notice must be provided to a customer no later than when the customer relationship is established (e.g., when a policy is purchased). For a consumer getting a quote, a notice is only required if their NPI is going to be shared with nonaffiliated third parties.

Step-by-Step Solution

1
Identify the individual's status during the quoting phase.
Jonathan is classified as a 'consumer'.
He is obtaining a service (a quote) for personal use but has not established an ongoing relationship.
2
Determine notice requirements for consumers.
No privacy notice is required at the quoting stage.
GLBA stipulates that a privacy notice is only required for consumers if the institution plans to disclose their NPI to nonaffiliated third parties outside of permitted exceptions.
3
Identify the individual's status when the policy is purchased.
Jonathan transitions from a 'consumer' to a 'customer'.
Purchasing a policy establishes an ongoing, continuing relationship with the financial institution.
4
Determine notice requirements for customers.
An initial privacy notice is mandatory no later than when the relationship is established.
GLBA requires all customers to receive an initial privacy notice when the ongoing relationship begins, followed by annual notices.

Key Concept

GLBA Consumer vs. Customer Privacy Notice Requirements
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic