Examkin

Question

Difficulty: EasyGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

James contacts Pioneer Risk Management to request a premium estimate for a homeowners policy. He provides his address and prior claims history to the agent but ultimately decides not to purchase the coverage. The agency has a strict internal policy and does not share any nonpublic personal information (NPI) with nonaffiliated third parties.

Under the Gramm-Leach-Bliley Act (GLBA), what is the agency's legal obligation regarding a privacy notice for James?

  1. A
    The agency must provide an initial privacy notice because James automatically became a customer when he requested a quote.
  2. B
    The agency must send an annual privacy notice to James every year for as long as his quote remains in their records.
  3. No privacy notice is required because James is a consumer and his information is not being shared with nonaffiliated third parties.Answer
  4. D
    The agency must provide a privacy notice giving James the right to opt out of receiving the agency's own internal marketing materials.

Answer

No privacy notice is required because James is a consumer and his information is not being shared with nonaffiliated third parties.
Under the Gramm-Leach-Bliley Act (GLBA), a person who obtains an isolated financial product or service, such as an insurance quote, is considered a 'consumer' rather than a 'customer'. A financial institution or insurance agency is only required to provide an initial privacy notice to a consumer if it plans to disclose that consumer's nonpublic personal information (NPI) to nonaffiliated third parties. Since Pioneer Risk Management does not share NPI externally, they are not required to provide James with a privacy notice.

Step-by-Step Solution

1
Determine if the individual is a consumer or a customer under GLBA.
James is a consumer.
He engaged in an isolated transaction (requesting a quote) and did not establish an ongoing relationship by purchasing a policy.
2
Identify the GLBA privacy notice requirements for a consumer.
A privacy notice is only required for a consumer if the financial institution intends to share their NPI with nonaffiliated third parties.
This is the specific statutory trigger for providing an initial notice to individuals who do not have an ongoing customer relationship.
3
Apply the scenario facts to the requirement.
The agency owes no notice to James.
The agency's policy is to not share NPI with nonaffiliated third parties, meaning the condition that triggers a notice requirement for a consumer has not been met.

Key Concept

GLBA Privacy Notice Triggers for Consumers vs. Customers
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic