Examkin

Question

Difficulty: EasyGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Elena operates a local property and casualty insurance agency and routinely collects Nonpublic Personal Information (NPI) from individuals requesting quotes and purchasing auto policies. To maintain compliance with the Gramm-Leach-Bliley Act (GLBA), which of the following actions must Elena take regarding privacy notices and information sharing? (Select all that apply)

  1. Provide an initial privacy notice to a new policyholder at the time a continuing customer relationship is established.Answer
  2. Give individuals a clear mechanism and a reasonable opportunity to opt out before sharing their NPI with nonaffiliated third parties.Answer
  3. C
    Deliver an annual privacy notice to individuals who only received a single auto insurance quote but did not purchase a policy.
  4. D
    Require all individuals to sign an affirmative 'opt-in' consent agreement before their NPI can be processed for standard underwriting.

Answer

The agency must provide an initial privacy notice when establishing a continuing customer relationship, and must give individuals a reasonable opportunity to opt out before sharing their NPI with nonaffiliated third parties.
The correct statements identify two core GLBA mandates: requiring an initial privacy notice when an ongoing customer relationship is established, and requiring that individuals be given a reasonable opportunity to opt out before their Nonpublic Personal Information is shared with nonaffiliated third parties.

Step-by-Step Solution

1
Analyze the difference between a consumer and a customer under GLBA.
A consumer has a one-time transaction (like getting a quote), while a customer has an ongoing relationship (like buying a policy).
This distinction determines whether an initial notice is always required and if an annual privacy notice is mandated.
2
Evaluate the GLBA requirement for sharing NPI with nonaffiliated third parties.
Agencies must provide a privacy notice and allow individuals a reasonable opportunity to opt out of this information sharing.
GLBA utilizes an opt-out framework for financial privacy, not a universal opt-in framework.
3
Select the statements that correctly reflect these GLBA mandates.
Providing an initial notice when establishing a customer relationship and offering an opt-out opportunity before sharing NPI are correct.
These actions align directly with the core Financial Privacy Rule provisions of the Gramm-Leach-Bliley Act.

Key Concept

GLBA Privacy Notice Triggers and Opt-Out Requirements
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic