Elena operates a local property and casualty insurance agency and routinely collects Nonpublic Personal Information (NPI) from individuals requesting quotes and purchasing auto policies. To maintain compliance with the Gramm-Leach-Bliley Act (GLBA), which of the following actions must Elena take regarding privacy notices and information sharing? (Select all that apply)
- Provide an initial privacy notice to a new policyholder at the time a continuing customer relationship is established.Cevap
- Give individuals a clear mechanism and a reasonable opportunity to opt out before sharing their NPI with nonaffiliated third parties.Cevap
- CDeliver an annual privacy notice to individuals who only received a single auto insurance quote but did not purchase a policy.
- DRequire all individuals to sign an affirmative 'opt-in' consent agreement before their NPI can be processed for standard underwriting.
Cevap
The agency must provide an initial privacy notice when establishing a continuing customer relationship, and must give individuals a reasonable opportunity to opt out before sharing their NPI with nonaffiliated third parties.
The correct statements identify two core GLBA mandates: requiring an initial privacy notice when an ongoing customer relationship is established, and requiring that individuals be given a reasonable opportunity to opt out before their Nonpublic Personal Information is shared with nonaffiliated third parties.
Adım Adım Çözüm
Anahtar Kavram
GLBA Privacy Notice Triggers and Opt-Out Requirements