A financial institution, including an insurance company, is collecting extensive personal and financial information from its customers to provide various services. Under the Gramm-Leach-Bliley Act (GLBA), what is a key requirement regarding the handling of this nonpublic personal information?
- AThe institution is prohibited from collecting any nonpublic personal information.
- BCustomers must be given an annual privacy notice explaining information-sharing practices and the right to opt out of sharing with nonaffiliated third parties.
- CIt must be shared with all affiliated companies without customer consent.
- DAll customer data must be publicly available after 5 years.
Show answer & explanationAnswer & explanation
Correct answer: B. Customers must be given an annual privacy notice explaining information-sharing practices and the right to opt out of sharing with nonaffiliated third parties.
GLBA requires financial institutions to provide customers with an annual privacy notice that explains their information-sharing practices and offers customers the right to opt out of certain disclosures of their nonpublic personal information to nonaffiliated third parties.
Why the other options are wrong
- A. GLBA recognizes the need for institutions to collect data but regulates its protection and sharing.
- C. Sharing with affiliates is often permitted, but GLBA focuses on transparency and opt-out rights for nonaffiliated third parties.
- D. GLBA's purpose is to protect privacy, not to make data public.
GLBA Privacy Rule
The Gramm-Leach-Bliley Act (GLBA) requires financial institutions, including insurance companies, to protect the privacy of consumers' nonpublic personal information. Key provisions include providing annual privacy notices and allowing consumers to opt out of certain information sharing with nonaffiliated third parties.
- Applies to financial institutions (including insurers).
- Protects nonpublic personal information.
- Requires annual privacy notices.
- Grants consumers the right to opt out of sharing with nonaffiliated third parties.
Memory trick: GLBA: 'G'uards 'L'imited 'B'asic 'A'ccess to private data.