Examkin

Question

Difficulty: MediumGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Oliver contacts Vanguard Independent Agency to obtain a quote for personal auto insurance. He provides his driver's license number and vehicle details, but ultimately decides not to purchase a policy. Vanguard does not share Oliver's data with any nonaffiliated third parties. The next day, Chloe purchases a renter's insurance policy through Vanguard, establishing an ongoing account with the agency. Under the Gramm-Leach-Bliley Act (GLBA), which of the following accurately describes Vanguard's privacy notice obligations?

  1. Vanguard must provide Chloe with an initial privacy notice when the policy is purchased and an annual notice thereafter, but is not required to provide any privacy notice to Oliver.Answer
  2. B
    Vanguard must provide both Oliver and Chloe with an initial privacy notice because both individuals disclosed Nonpublic Personal Information (NPI) to the agency.
  3. C
    Vanguard must provide Chloe with an initial privacy notice at the time of purchase, but an annual notice is only required if Vanguard intends to share her NPI with nonaffiliated marketers.
  4. D
    Vanguard must provide Oliver with an initial notice and an opt-out opportunity before archiving his quote, while Chloe only requires an annual privacy notice.

Answer

Vanguard must provide Chloe with an initial privacy notice when the policy is purchased and an annual notice thereafter, but is not required to provide any privacy notice to Oliver.
Under the Gramm-Leach-Bliley Act (GLBA), a 'customer' is an individual who establishes an ongoing relationship with a financial institution (like Chloe purchasing a policy). Customers must receive an initial privacy notice and an annual privacy notice. A 'consumer' is someone who has no ongoing relationship (like Oliver getting a quote). Consumers only require an initial privacy notice if the institution intends to share their Nonpublic Personal Information (NPI) with nonaffiliated third parties. Since Vanguard does not share Oliver's data, no notice is required for him.

Step-by-Step Solution

1
Determine Oliver's status under GLBA regulations.
Oliver is classified as a 'consumer' because he engaged in a one-time transaction (obtaining a quote) without establishing an ongoing relationship.
GLBA distinguishes between a consumer (one-time interaction) and a customer (ongoing relationship).
2
Evaluate the privacy notice requirements for Oliver.
Because Vanguard is not sharing Oliver's Nonpublic Personal Information (NPI) with nonaffiliated third parties, they are not legally required to give him an initial privacy notice.
Consumers only require an initial privacy notice if the institution intends to share their NPI outside of permitted exceptions.
3
Determine Chloe's status and the corresponding notice requirements.
Chloe is classified as a 'customer' because she purchased a policy, establishing an ongoing relationship. Vanguard must provide her with an initial privacy notice at the time of purchase, plus an annual privacy notice for as long as the relationship continues.
The GLBA mandates both initial and annual privacy notices for all customers, regardless of the agency's data-sharing practices.

Key Concept

GLBA Distinctions Between Consumers and Customers
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic