Marcus visits Sentinel Insurance Solutions to request a quote for a personal umbrella policy. He provides his financial details but ultimately decides not to purchase the coverage. Sentinel does not share his nonpublic personal information (NPI) with any nonaffiliated third parties outside of standard legal exceptions. Three months later, his neighbor, Sarah, purchases a homeowners policy through Sentinel, establishing an ongoing relationship. Under the Gramm-Leach-Bliley Act (GLBA), what are Sentinel's privacy notice obligations regarding these two individuals?
- Sentinel is not required to provide a privacy notice to Marcus, but must provide an initial privacy notice to Sarah when the customer relationship is established.Cevap
- BSentinel must provide an initial privacy notice to both Marcus and Sarah at the exact moment they first disclose their nonpublic personal information.
- CSentinel is exempt from providing an initial privacy notice to both individuals, provided the agency maintains a compliant written information security program.
- DSentinel must provide Marcus with an initial privacy notice solely to offer him an opt-out opportunity, while Sarah only requires an annual notice.
Cevap
Sentinel is not required to provide a privacy notice to Marcus, but must provide an initial privacy notice to Sarah when the customer relationship is established.
Under the GLBA Financial Privacy Rule, an individual who obtains a one-time service (like a quote) is considered a 'consumer'. A consumer only needs an initial privacy notice if the financial institution intends to share their NPI with nonaffiliated third parties outside of standard legal exceptions. Because Sentinel does not do this, Marcus requires no notice. Sarah, by purchasing a policy, becomes a 'customer' with an ongoing relationship. Financial institutions must provide an initial privacy notice to all customers no later than when the customer relationship is established.
Adım Adım Çözüm
Anahtar Kavram
GLBA Consumer vs. Customer Notice Requirements