Examkin

Question

Difficulty: EasyGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Sarah purchases a life insurance policy through a local insurance agency and establishes an ongoing relationship by paying monthly premiums. Under the Gramm-Leach-Bliley Act (GLBA), which of the following best describes Sarah's status and the agency's required timing for providing privacy notices to her?

  1. A
    She is a consumer and must receive a new privacy notice during every individual transaction, such as each monthly premium payment.
  2. She is a customer and must receive an initial privacy notice when the relationship is established, as well as an annual privacy notice thereafter.Answer
  3. C
    She is a customer, but the agency is only legally required to provide a single initial privacy notice at the time the policy is issued.
  4. D
    She is a consumer and only needs to be provided with an initial privacy notice if the agency decides to share her nonpublic personal information with nonaffiliated third parties.

Answer

She is classified as a customer and must receive both an initial privacy notice when the relationship begins and an annual privacy notice every year thereafter.
Under the Gramm-Leach-Bliley Act, an individual who establishes an ongoing relationship with a financial institution or insurance agency (such as by purchasing a policy) is defined as a 'customer'. By law, the agency must provide a customer with a clear and conspicuous initial privacy notice when the customer relationship is established, and they must follow up with an annual privacy notice for every year the relationship remains active.

Step-by-Step Solution

1
Determine the individual's legal classification under the GLBA based on the scenario.
Because Sarah purchased a policy and has an ongoing relationship with the agency, she is classified as a 'customer'. A 'consumer' would merely be someone involved in a one-time transaction (like requesting a quote but not buying).
GLBA explicitly distinguishes between consumers (no ongoing relationship) and customers (ongoing relationship).
2
Identify the mandatory privacy notice timing requirements for that specific classification.
As a customer, Sarah is legally required to receive an initial privacy notice when the relationship is established and an annual privacy notice for the duration of the policy.
The Financial Privacy Rule within GLBA dictates strict notice delivery schedules based on whether the individual is a consumer or a customer.

Key Concept

GLBA Consumer vs. Customer Definitions and Privacy Notice Timing
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic