nerdexam
IAPP

CIPP-US · Question #136

Under GLBA. which of these organizations would not be required to provide its customers with an annual privacy notice?

The correct answer is D. A credit union that has not made changes to its privacy notice from last year. Under the Gramm-Leach-Bliley Act (GLBA), financial institutions are required to provide their customers with an annual privacy notice that explains how they collect, share, and protect customers' personal information. However, the GLBA Privacy Rule (16 CFR Part 313) was amended b

Health, Financial & Marketing Privacy

Question

Under GLBA. which of these organizations would not be required to provide its customers with an annual privacy notice?

Options

  • AAn insurance company that has no privacy department
  • BAn auction house that also acts as a financial institution
  • CA credit union that has made changes to its privacy notice from last year.
  • DA credit union that has not made changes to its privacy notice from last year

How the community answered

(58 responses)
  • A
    9% (5)
  • B
    5% (3)
  • C
    14% (8)
  • D
    72% (42)

Explanation

Under the Gramm-Leach-Bliley Act (GLBA), financial institutions are required to provide their customers with an annual privacy notice that explains how they collect, share, and protect customers' personal information. However, the GLBA Privacy Rule (16 CFR Part 313) was amended by the Fixing America's Surface Transportation Act (FAST Act) in 2015, which introduced an exception to this requirement. According to the FAST Act, financial institutions are not required to provide annual privacy notices if they meet two conditions: No changes have been made to their privacy policy or practices since the last notice was sent to The financial institution does not share customers' nonpublic personal information with nonaffiliated third parties in a way that triggers an opt-out requirement under GLBA.

Topics

#GLBA#annual privacy notice#financial institutions#notice exceptions

Community Discussion

No community discussion yet for this question.

Full CIPP-US Practice