Examkin

Question

Difficulty: Very hardGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Pinnacle Risk Partners is an independent insurance agency. During the course of business, Pinnacle interacts with several individuals:

* Liam requests an auto insurance quote but decides not to purchase a policy.
* Sophia purchases a long-term care policy through Pinnacle, and the agency continues to service her account.
* Noah purchased a homeowners policy through Pinnacle, but the policy was canceled three years ago and not renewed.

Under the Gramm-Leach-Bliley Act (GLBA) regulations regarding consumer privacy, which of the following statements about Pinnacle's obligations are CORRECT? (Select all that apply)

  1. Because Sophia has established a continuing relationship with Pinnacle, the agency must provide her with an initial privacy notice no later than when the relationship is established and an annual notice thereafter.Answer
  2. B
    Pinnacle must provide Liam with an initial privacy notice at the time of his quote request, regardless of whether the agency intends to share his nonpublic personal information with nonaffiliated third parties.
  3. If Pinnacle intends to sell Liam's nonpublic personal information to an unaffiliated marketing firm, the agency must provide him with an initial privacy notice and a reasonable opportunity to opt out before the disclosure.Answer
  4. D
    Noah maintains the legal classification of a customer because he previously purchased a policy, meaning Pinnacle is required to continue sending him annual privacy notices.
  5. E
    The GLBA completely prohibits Pinnacle from disclosing any nonpublic personal information to nonaffiliated third parties for marketing purposes, even if an opt-out notice is provided.

Answer

The correct statements are that Sophia requires initial and annual notices due to her customer status, and Liam requires an initial notice and opt-out opportunity only if his data will be shared with unaffiliated third parties.
The correct statements accurately reflect the GLBA distinction between consumers and customers. Sophia is a customer because she has an ongoing relationship with the agency, requiring both initial and annual privacy notices. Liam is a consumer; therefore, he only requires an initial notice and an opt-out opportunity if the agency intends to share his nonpublic personal information with nonaffiliated third parties outside of standard exceptions.

Step-by-Step Solution

1
Analyze Sophia's legal status under the GLBA
Sophia has an ongoing relationship, making her a 'customer'.
Customers are legally entitled to both initial and annual privacy notices.
2
Analyze Liam's legal status under the GLBA
Liam engaged in a one-time transaction (quote), making him a 'consumer'.
Consumers do not automatically receive initial notices unless their nonpublic personal information is being shared outside of standard exceptions.
3
Analyze Noah's legal status under the GLBA
Noah's policy was canceled three years ago, ending his ongoing relationship.
Former customers revert to consumer status, meaning the agency is no longer obligated to send annual privacy notices.
4
Evaluate the GLBA's prohibition rules regarding data sharing
The GLBA does not absolutely prohibit sharing NPI; it requires proper notice and opt-out procedures.
Agencies can share data with nonaffiliated marketing firms as long as consumers are given an initial notice and a reasonable opportunity to opt out first.

Key Concept

GLBA Consumer vs. Customer Privacy Notice Requirements
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic