Examkin

Question

Difficulty: MediumGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Horizon General Agency collects nonpublic personal information (NPI) from individuals who request homeowners insurance quotes online. Many of these individuals do not ultimately purchase a policy and have no further contact with the agency. Horizon now wishes to sell the collected contact and financial data of these non-purchasers to an unaffiliated home improvement company. Under the Gramm-Leach-Bliley Act (GLBA), what action must Horizon take before sharing this information?

  1. Provide these individuals with an initial privacy notice and a reasonable opportunity to opt out of the disclosure.Answer
  2. B
    Share the information freely, because individuals who only request rate quotes are exempt from GLBA privacy protections.
  3. C
    Ensure that an ongoing customer relationship is formally established before any nonpublic personal information can be legally shared.
  4. D
    Begin sending annual privacy notices to these individuals for as long as their data is retained in the agency's system.

Answer

Provide these individuals with an initial privacy notice and a reasonable opportunity to opt out of the disclosure.
Under the GLBA, individuals who request a quote but do not purchase a policy are classified as 'consumers'. If a financial institution wants to share a consumer's Nonpublic Personal Information (NPI) with a nonaffiliated third party, it must first provide an initial privacy notice and a reasonable opportunity to opt out.

Step-by-Step Solution

1
Classify the relationship between the agency and the individuals.
The individuals who only requested a quote are considered 'consumers', not 'customers', because there is no ongoing relationship.
The GLBA distinguishes between consumers and customers to determine privacy notice obligations.
2
Determine the privacy notice requirements for consumers.
An agency is not required to provide an initial privacy notice to a consumer unless it intends to share their nonpublic personal information with a nonaffiliated third party.
This establishes the trigger for when providing a privacy notice becomes mandatory for individuals who did not purchase a policy.
3
Identify the mandatory steps before sharing nonpublic personal information with a nonaffiliated third party.
Before the agency can sell the data to the home improvement company, it must provide a clear privacy notice and offer the consumers a reasonable opportunity to opt out of the sharing arrangement.
The GLBA mandates that all individuals have the right to prevent their nonpublic personal information from being shared with nonaffiliated entities.

Key Concept

GLBA distinction between consumers and customers, and the requirements for sharing Nonpublic Personal Information (NPI)
Rate this question

Topics

Gramm-Leach-Bliley Act (GLBA) and Consumer Privacy

More questions from this topic