Jonathan contacts an independent producer at Beacon Insurance Group to request a premium quote for a personal life insurance policy. He provides his medical history and financial details for the quote, but ultimately decides not to buy the policy at that time. Six months later, Jonathan returns to Beacon Insurance Group, completes a new application, and purchases a whole life policy.
Under the Gramm-Leach-Bliley Act (GLBA), what is Beacon Insurance Group's obligation regarding the delivery of an initial privacy notice to Jonathan, assuming the agency does not share his nonpublic personal information (NPI) with nonaffiliated third parties during the initial quoting phase?
- Beacon must provide an initial privacy notice no later than when Jonathan purchases the policy and establishes a customer relationship.Cevap
- BBeacon must provide an initial privacy notice immediately when Jonathan first provides his medical and financial details for the quote.
- CBeacon is required to provide an initial privacy notice only if Jonathan explicitly requests to opt out of information sharing after buying the policy.
- DBeacon must provide the privacy notice within 30 days after the end of the calendar year in which the quoting process occurred.
Cevap
The agency must provide an initial privacy notice no later than when the policy is purchased and a customer relationship is established.
Under GLBA, a clear distinction is made between a 'consumer' (who engages in a one-time transaction) and a 'customer' (who has an ongoing relationship). A privacy notice must be provided to a customer no later than when the customer relationship is established (e.g., when a policy is purchased). For a consumer getting a quote, a notice is only required if their NPI is going to be shared with nonaffiliated third parties.
Adım Adım Çözüm
Anahtar Kavram
GLBA Consumer vs. Customer Privacy Notice Requirements