Examkin

Question

Difficulty: HardGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Sarah contacts Horizon Commercial Brokerage to request a premium quote for her business's liability insurance. She provides the agency with her company's detailed financial statements. After receiving the quote, Sarah declines the offer and decides not to purchase a policy. A month later, Horizon Commercial Brokerage plans to sell a list of its recent prospect data, which includes Sarah's financial information, to an unaffiliated telemarketing firm. Under the Gramm-Leach-Bliley Act (GLBA), which of the following actions must the brokerage take before disclosing Sarah's information?

  1. Provide Sarah with a clear and conspicuous initial privacy notice and a reasonable opportunity to opt out of the disclosure.Answer
  2. B
    No action is required because Sarah is classified as a consumer, not a customer, and is therefore automatically exempt from privacy notice requirements.
  3. C
    Provide Sarah with an annual privacy notice, as requesting a quote automatically established an ongoing customer relationship with the brokerage.
  4. D
    Discard the information immediately, as the GLBA strictly prohibits the sharing of a consumer's financial data with nonaffiliated third parties under any circumstances.

Answer

The brokerage must provide Sarah with an initial privacy notice and a reasonable opportunity to opt out of the disclosure before sharing her data.
Under the GLBA, an individual who merely seeks a quote is classified as a 'consumer.' While a financial institution is not required to automatically provide an initial privacy notice to every consumer (unlike a 'customer' who establishes an ongoing relationship), the institution MUST provide an initial notice and a reasonable opportunity to opt out BEFORE it discloses any Nonpublic Personal Information (NPI) about the consumer to any nonaffiliated third party outside of specific exemptions (such as completing the transaction). Because selling data to a telemarketer is not an exempt transaction, the notice and opt-out are legally required.

Step-by-Step Solution

1
Determine Sarah's legal status under GLBA (Consumer vs. Customer).
Sarah is a consumer.
She obtained a one-time service (a quote) but did not establish an ongoing relationship (did not purchase a policy).
2
Evaluate the agency's planned action regarding Sarah's Nonpublic Personal Information (NPI).
The agency plans to sell the NPI to an unaffiliated telemarketing firm.
This action falls outside the scope of standard exceptions (like sharing data with an underwriter to process the actual quote).
3
Apply the GLBA disclosure rules for consumers.
The agency must provide an initial privacy notice and an opt-out opportunity.
While consumers do not automatically require an initial notice upon contact, an agency cannot share a consumer's NPI with a nonaffiliated third party outside of exceptions unless they first provide the notice and the right to opt out.

Key Concept

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic