Soru

Zorluk: OrtaGramm-Leach-Bliley Act (GLBA) and Consumer Privacy

Lakeside Indemnity receives an inquiry from David, who provides his financial background and health history to obtain a life insurance quote. David ultimately decides not to purchase the policy. A few weeks later, Lakeside Indemnity decides it wants to share David's nonpublic personal information with an unaffiliated third-party marketing firm. Under the Gramm-Leach-Bliley Act (GLBA), what is Lakeside Indemnity required to do before sharing this information?

  1. Provide David with an initial privacy notice and a clear opportunity to opt out of the information sharing.Cevap
  2. B
    Nothing, because David is classified as a consumer rather than a customer, meaning the agency is exempt from providing privacy notices.
  3. C
    Provide David with an annual privacy notice detailing the agency's information-sharing practices.
  4. D
    Automatically share the information as long as the third-party marketing firm agrees to abide by the Safeguards Rule.

Cevap

Lakeside Indemnity must provide David with an initial privacy notice and a clear opportunity to opt out of the information sharing.
The correct answer accurately reflects the Financial Privacy Rule of the Gramm-Leach-Bliley Act. Because David is a consumer, Lakeside Indemnity is not automatically required to give him a privacy notice just for quoting. However, the moment the agency decides to share his nonpublic personal information with a non-affiliated third party, it triggers the requirement to provide an initial privacy notice and give David a reasonable opportunity to opt out.

Adım Adım Çözüm

1
Identify David's status under GLBA.
David is a 'consumer' because he requested a quote but did not establish an ongoing relationship (which would make him a 'customer').
GLBA distinguishes between consumers (isolated transactions) and customers (ongoing relationships) to determine notice requirements.
2
Determine the GLBA rule for sharing a consumer's nonpublic personal information (NPI) with non-affiliated third parties.
If a financial institution wants to share a consumer's NPI with a non-affiliated third party, it must first provide an initial privacy notice and a reasonable opportunity to opt out.
This is the core privacy protection mandate of GLBA's Financial Privacy Rule.

Anahtar Kavram

GLBA Consumer vs. Customer Privacy Notice Requirements
Bu soruyu puanla