An insurance agency is auditing its procedures for handling Nonpublic Personal Information (NPI) to ensure compliance with the Gramm-Leach-Bliley Act (GLBA). Match each agency situation or action on the left with the correct GLBA definition or requirement on the right.
- An individual with an active, ongoing insurance policy who receives annual privacy notices from the agency.GLBA 'Customer'
- An individual who only requests a one-time rate quote and is not entitled to annual privacy notices.GLBA 'Consumer'
- The agency implements encrypted databases and locked filing cabinets to protect stored NPI.Safeguards Rule
- The agency provides a clear check-box allowing applicants to prevent their NPI from being shared with nonaffiliated third parties.Opt-Out Right
Cevap
Ongoing policyholder matches GLBA 'Customer'; one-time quote matches GLBA 'Consumer'; encrypted databases matches Safeguards Rule; and check-box for preventing NPI sharing matches Opt-Out Right.
GLBA establishes specific rules for handling NPI. It distinguishes between consumers (one-time interactions) and customers (ongoing relationships) to determine notice requirements. It also requires data protection through the Safeguards Rule and mandates an Opt-Out Right for sharing NPI with nonaffiliated third parties.
Adım Adım Çözüm
Anahtar Kavram
GLBA Definitions and Compliance Mandates