The CFPB finalized a rule to ease the annual privacy notice requirement under the Gramm-Leach-Bliley Act. Effective upon publication in the Federal Register, financial institutions may post their privacy notices online rather than delivering them individually in certain circumstances.
Specifically, a bank may forgo mailing the annual GLBA disclosure if the information on it has not changed since the previous notice, if it does not share the customer’s personal information in a way that triggers GLBA opt-out rights, if it has other channels for disclosures or opt-outs required by the Fair Credit Reporting Act and if the bank uses the federal agencies’ model privacy notice form.
Instead, banks would be required to post their privacy notices online in an accessible and conspicuous way and notify customers in other required notices where to find it, that it has not changed, and that it will be promptly mailed upon request. The final rule is largely unchanged from the proposed rule, which ABA and other groups said would have “very little practical value to consumers or financial service providers.”
Read the final rule.