First page Back Continue Last page Overview Graphics
Except as … authorized …, you may not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party unless:
(i) You have provided to the consumer an initial notice as required;
(ii) You have provided to the consumer an opt out notice as required in Sec. 313.7
(iii) You have given the consumer a reasonable opportunity, before you disclose the information to the nonaffiliated third party, to opt out of the disclosure; and (iv) The consumer does not opt out.
16 CFR §313.8
Applies to “financial institutions,” a very broad category
Notes: