The regulations require financial institutions to provide particular notices and to comply with certain limitations on disclosure of nonpublic personal information. A financial institution must provide a notice of its privacy policies and practices with respect to both affiliated and nonaffiliated third parties, and allow the consumer to opt out of the disclosure of the consumer’s nonpublic personal information to a nonaffiliated third party if the disclosure is outside of the exceptions.
- FileFileModel Form Statement of Work (41.45 KB)FileModel Form Rule with Opt Out (87.41 KB)FileModel Form Rule with No Opt Out (82.61 KB)FilePreemption: Flagstar Bank - Petition (160.76 KB)FileFileFilePreemption: State of Connecticut - Petition (585.91 KB)FileFilePreemption: State of North Dakota - Petition (555.91 KB)FileQuantitative Research - Study Codebook (63.74 KB)FileQuantitative Research - Study Data (102.12 KB)