Examkin

Question

Difficulty: MediumGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Elena, an independent producer at Westwood Insurance Advisors, interacts with various individuals daily. Some request one-time auto insurance quotes without buying a policy, while others purchase policies and establish ongoing relationships. Under the Gramm-Leach-Bliley Act (GLBA), Westwood must adhere to strict rules regarding Nonpublic Personal Information (NPI). Which of the following statements regarding the agency's obligations for providing privacy notices and opt-out rights are correct? (Select all that apply)

  1. For individuals who purchase a policy and become customers, the agency must provide an initial privacy notice no later than the time the customer relationship is established.Answer
  2. For individuals who only request a one-time quote and remain consumers, the agency is only required to provide a privacy notice if it intends to share their NPI with nonaffiliated third parties outside of standard exceptions.Answer
  3. C
    The agency must automatically provide an annual privacy notice to every individual who requested a quote during the year, regardless of whether they purchased a policy.
  4. D
    Customers can exercise their opt-out rights to definitively prevent the agency from sharing NPI with a third-party appraiser assigned to investigate a property damage claim.

Answer

The correct statements are that new customers must receive an initial notice when their relationship is established, and consumers (those seeking one-time quotes) only require a notice if their NPI will be shared with nonaffiliated third parties.
Under GLBA, the obligations depend on the relationship status. An institution must automatically provide an initial privacy notice when a customer relationship is established. However, for a consumer (one-time interaction), a notice is only required before their NPI is shared with a nonaffiliated third party.

Step-by-Step Solution

1
Distinguish between a 'consumer' and a 'customer' under GLBA.
A consumer has no ongoing relationship (e.g., getting a quote), whereas a customer has an ongoing relationship (e.g., buying a policy).
GLBA imposes different notice requirements based on this specific classification.
2
Determine the notice requirements for each classification.
Customers must receive initial and annual notices. Consumers only require an initial notice if the institution plans to disclose NPI to nonaffiliated third parties.
This confirms the rules for initial and annual notices applied in the correct and incorrect options.
3
Evaluate the exceptions to a customer's right to opt out.
The GLBA provides exceptions to the opt-out rule for disclosures necessary to administer or enforce a transaction, such as processing an insurance claim.
This invalidates the claim that an opt-out can prevent data sharing required for a claims investigation.

Key Concept

GLBA Consumer vs. Customer Distinctions and Opt-Out Exceptions
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic