The Gramm-Leach-Bliley Act (GLBA) requires financial institutions, including insurance companies, to protect the privacy of consumers' nonpublic personal information. Which of the following is a key requirement of GLBA regarding consumer privacy?
- AFinancial institutions must provide consumers with a clear and conspicuous notice of their privacy policies and practices, including their right to opt out of certain information sharing.
- BFinancial institutions are generally prohibited from sharing any consumer nonpublic personal information with third parties under any circumstances.
- CGLBA primarily focuses on the security of electronic financial transactions and does not address information sharing practices.
- DFinancial institutions must obtain explicit written consent from consumers before sharing any nonpublic personal information with affiliates.
Show answer & explanationAnswer & explanation
Correct answer: A. Financial institutions must provide consumers with a clear and conspicuous notice of their privacy policies and practices, including their right to opt out of certain information sharing.
GLBA mandates that financial institutions, including insurers, provide consumers with privacy notices that explain how their nonpublic personal information is collected, used, and shared. These notices must also inform consumers of their right to opt out of certain disclosures to non-affiliated third parties.
Why the other options are wrong
- B. GLBA permits sharing under certain conditions, especially with an opt-out mechanism.
- C. GLBA has three main parts: Financial Privacy Rule, Safeguards Rule, and Pretexting Rule, all related to consumer privacy and data security.
- D. GLBA allows sharing with affiliates without opt-out rights, and sharing with non-affiliates generally requires an opt-out opportunity, not explicit prior consent.
Gramm-Leach-Bliley Act (GLBA)
A federal law that requires financial institutions (including insurers) to explain their information-sharing practices to customers and to safeguard sensitive data. It includes the Financial Privacy Rule, Safeguards Rule, and Pretexting Rule.
- Mandates privacy notices for consumers
- Grants consumers the right to opt out of certain information sharing
- Requires safeguarding customer information (Safeguards Rule)
Memory trick: GLBA: Give Notice, Let Opt-out, Guard Data.