A registered broker-dealer is updating its privacy compliance procedures under SEC Regulation S-P. The firm proposes a new policy requiring retail clients who wish to opt out of nonpublic personal information sharing with nonaffiliated third parties to submit a handwritten letter via certified mail to the firm's legal compliance office. Which of the following statements accurately evaluates this proposed policy under SEC Regulation S-P rules?
- AThe policy is compliant because Regulation S-P permits broker-dealers to mandate written physical documentation to ensure identity verification before processing privacy preferences.
- The policy is non-compliant because requiring a handwritten letter sent by certified mail fails to provide clients with a reasonable means to opt out of information sharing.Answer
- CThe policy is non-compliant solely because Regulation S-P requires opt-out provisions to be processed automatically unless a customer explicitly consents to information sharing.
- DThe policy is compliant provided the firm delivers this opt-out instruction exclusively inside the annual privacy notice rather than during initial account onboarding.
Answer
The proposed policy is non-compliant because requiring a handwritten letter by certified mail does not provide clients with a reasonable means to opt out of information sharing under SEC Regulation S-P.
Under SEC Regulation S-P, financial institutions must afford retail consumers and customers a simple, convenient, and reasonable method to opt out of sharing nonpublic personal information with nonaffiliated third parties. Acceptable methods include providing a toll-free telephone number, a reply card with pre-addressed postage, or an electronic opt-out mechanism. Demanding a custom handwritten letter sent via certified mail creates an excessive burden and fails the reasonable means requirement established by the SEC.
Step-by-Step Solution
Key Concept
Regulation S-P Reasonable Opt-Out Standard
Estimated Time:1m 30s