Examkin

Question

Difficulty: MediumGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Olivia visits Oakbridge Insurance Services to request a quote for a personal homeowners insurance policy. To ensure an accurate quote, she provides the agent with her Social Security number, credit score estimation, and past claims history. After reviewing the proposal, Olivia decides the premium is too high and leaves the agency without purchasing a policy or signing any agreements. Under the Gramm-Leach-Bliley Act (GLBA), which of the following statements correctly describes the agency's obligation regarding a privacy notice for Olivia?

  1. The agency is not required to provide Olivia with an initial privacy notice unless it intends to share her nonpublic personal information with nonaffiliated third parties outside of standard exceptions.Answer
  2. B
    The agency must provide an initial privacy notice immediately because collecting her financial details automatically establishes an ongoing customer relationship.
  3. C
    The agency is required to provide an initial privacy notice before she leaves the office, regardless of whether her information will be shared with anyone else.
  4. D
    The agency must send both an initial privacy notice and subsequent annual notices for as long as they retain her quote information in their database.

Answer

The agency is not required to provide Olivia with an initial privacy notice unless it intends to share her nonpublic personal information with nonaffiliated third parties outside of standard exceptions.
Under the Gramm-Leach-Bliley Act (GLBA), a 'consumer' is an individual who conducts a one-time transaction, such as requesting an insurance quote. A 'customer' is an individual who has an ongoing relationship with the financial institution, such as purchasing a policy. Because Olivia did not purchase the policy, she is a consumer. Financial institutions are not legally required to provide an initial privacy notice to a consumer unless they intend to disclose that consumer's nonpublic personal information (NPI) to a nonaffiliated third party outside of permitted administrative exceptions.

Step-by-Step Solution

1
Identify the individual's classification under the GLBA.
Olivia is classified as a 'consumer'.
She engaged in a one-time transaction (getting a quote) without purchasing a product or establishing an ongoing relationship.
2
Determine the GLBA privacy notice requirements for a 'consumer'.
A privacy notice is only required for consumers if the institution plans to share their Nonpublic Personal Information (NPI) with nonaffiliated third parties.
The GLBA distinguishes between consumers (who only get a notice if their data is shared) and customers (who must always receive an initial and annual notice).
3
Evaluate the agency's obligations in this specific scenario.
Oakbridge Insurance Services does not owe Olivia a privacy notice by default, provided they keep her data internal or only share it under standard business exceptions.
Because she did not become a customer, the strict customer notification rules (mandatory initial and annual notices) do not apply.

Key Concept

GLBA Consumer vs. Customer Distinction and Notice Requirements
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic