Question

Difficulty: MediumGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Emily contacts Horizon Insurance Partners to obtain a quote for a personal umbrella liability policy. She provides her name, address, and driving history for the quoting process. After reviewing the premium, she decides not to purchase the policy. Horizon Insurance Partners does not share Nonpublic Personal Information (NPI) with any nonaffiliated third parties outside of standard legal exceptions. Under the Gramm-Leach-Bliley Act (GLBA), what is the agency's obligation regarding a privacy notice for Emily?

  1. A
    The agency must provide an initial privacy notice at the time the quote is generated because collecting any NPI automatically establishes a customer relationship.
  2. B
    The agency is required to provide an initial privacy notice, but is exempt from providing an annual notice since a policy was not purchased.
  3. C
    The agency must provide a privacy notice with an opt-out provision before disposing of her application data.
  4. The agency is not required to provide a privacy notice because Emily is a consumer and her NPI is not shared with nonaffiliated third parties.Answer

Answer

The agency is not required to provide a privacy notice because Emily is a consumer and her NPI is not shared with nonaffiliated third parties.
Under the Gramm-Leach-Bliley Act (GLBA), Emily is classified as a consumer, not a customer, because she only engaged in an isolated transaction (requesting a quote) and did not purchase a policy. Financial institutions are only required to provide an initial privacy notice to a consumer if they intend to disclose their Nonpublic Personal Information (NPI) to nonaffiliated third parties. Since Horizon Insurance Partners does not share NPI outside of standard legal exceptions, they have no obligation to provide a privacy notice to Emily.

Step-by-Step Solution

1
Determine Emily's classification under the Gramm-Leach-Bliley Act (GLBA).
Emily is classified as a 'consumer' rather than a 'customer'.
She engaged in an isolated transaction (requesting a quote) and did not purchase a policy, which means she did not establish an ongoing relationship.
2
Identify the privacy notice requirements specifically for a consumer.
An initial privacy notice is only required for a consumer if the agency intends to share their Nonpublic Personal Information (NPI) with nonaffiliated third parties.
GLBA limits the initial notice mandate for consumers strictly to situations where their NPI will be disclosed outside of standard legal exceptions.
3
Apply the agency's data sharing practices to the GLBA requirement.
No privacy notice is required for Emily.
Horizon Insurance Partners does not share NPI with nonaffiliated third parties, meaning the condition that triggers a notice requirement for a consumer is not met.

Key Concept

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy
Rate this question