Emily contacts Horizon Insurance Partners to obtain a quote for a personal umbrella liability policy. She provides her name, address, and driving history for the quoting process. After reviewing the premium, she decides not to purchase the policy. Horizon Insurance Partners does not share Nonpublic Personal Information (NPI) with any nonaffiliated third parties outside of standard legal exceptions. Under the Gramm-Leach-Bliley Act (GLBA), what is the agency's obligation regarding a privacy notice for Emily?
- AThe agency must provide an initial privacy notice at the time the quote is generated because collecting any NPI automatically establishes a customer relationship.
- BThe agency is required to provide an initial privacy notice, but is exempt from providing an annual notice since a policy was not purchased.
- CThe agency must provide a privacy notice with an opt-out provision before disposing of her application data.
- The agency is not required to provide a privacy notice because Emily is a consumer and her NPI is not shared with nonaffiliated third parties.Answer
Answer
The agency is not required to provide a privacy notice because Emily is a consumer and her NPI is not shared with nonaffiliated third parties.
Under the Gramm-Leach-Bliley Act (GLBA), Emily is classified as a consumer, not a customer, because she only engaged in an isolated transaction (requesting a quote) and did not purchase a policy. Financial institutions are only required to provide an initial privacy notice to a consumer if they intend to disclose their Nonpublic Personal Information (NPI) to nonaffiliated third parties. Since Horizon Insurance Partners does not share NPI outside of standard legal exceptions, they have no obligation to provide a privacy notice to Emily.
Step-by-Step Solution
Key Concept
Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy