Examkin

Question

Difficulty: HardGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Osprey Wealth & Protection, an independent insurance brokerage, collects detailed financial and medical data from two individuals on a Monday morning.

- Mr. Harrison completes an application, goes through full underwriting, and finalizes the purchase of a variable annuity contract.
- Ms. Jenkins provides her data solely to receive a comparative life insurance quote, but explicitly declines to purchase a policy after reviewing the prices.

Osprey Wealth & Protection maintains a strict internal policy of never disclosing nonpublic personal information (NPI) to nonaffiliated third parties, except as strictly necessary to process the transactions requested by the individual.

Under the Gramm-Leach-Bliley Act (GLBA), which of the following statements accurately describes the brokerage's privacy notice obligations to these two individuals?

  1. A
    The brokerage is exempt from providing an initial privacy notice to either individual because it does not share nonpublic personal information with nonaffiliated third parties outside of permitted exceptions.
  2. B
    The brokerage must provide an initial privacy notice and an opt-out opportunity to both individuals because both supplied nonpublic personal information during their interactions.
  3. The brokerage must provide an initial privacy notice to Mr. Harrison no later than when the customer relationship is established, but is not required to provide any privacy notice to Ms. Jenkins.Answer
  4. D
    The brokerage must provide a standard initial privacy notice to Mr. Harrison at the time of purchase, and must provide Ms. Jenkins with a shortened privacy notice acknowledging her data was collected.

Answer

The brokerage must provide an initial privacy notice to Mr. Harrison no later than when the customer relationship is established, but is not required to provide any privacy notice to Ms. Jenkins.
Under GLBA regulations, a person who purchases an insurance policy or annuity establishes an ongoing relationship and is defined as a 'customer'. A firm must provide an initial privacy notice to all customers no later than when the relationship is established, regardless of the firm's data sharing practices. Conversely, a person who simply requests a quote is a 'consumer'. A firm is only required to provide an initial privacy notice to a consumer if it intends to share that consumer's nonpublic personal information with nonaffiliated third parties outside of standard, everyday business exceptions (like processing the quote). Because this brokerage does not share information outside of those exceptions, the consumer does not require any privacy notice.

Step-by-Step Solution

1
Determine the statutory classification of Mr. Harrison under GLBA.
Mr. Harrison purchased a product (a variable annuity), meaning he has an ongoing relationship with the firm. He is classified as a 'customer'.
GLBA distinguishes between 'consumers' (one-time interactions) and 'customers' (ongoing relationships).
2
Determine the statutory classification of Ms. Jenkins under GLBA.
Ms. Jenkins only requested a quote and did not purchase a product. She has no ongoing relationship, making her a 'consumer'.
Obtaining a quote for personal, family, or household purposes meets the definition of a consumer interaction without establishing a customer relationship.
3
Apply GLBA privacy notice rules based on their respective classifications and the firm's data sharing practices.
Customers (Mr. Harrison) must always receive an initial privacy notice. Consumers (Ms. Jenkins) only require a notice if the firm shares their NPI with nonaffiliated third parties outside of standard exceptions. Since the firm does not do this, Ms. Jenkins requires no notice.
Notice requirements are universally mandatory for customers, but conditional for consumers based on third-party sharing practices.

Key Concept

GLBA distinction between Consumers and Customers regarding Privacy Notice Requirements
Estimated Time:1m 30s
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic