Model Privacy Notice Pulbished in Federal Register
March 29, 2007
Eight federal regulators today released a notice of proposed rulemaking (NPR) requesting comment on a model privacy form that financial institutions can use for their privacy notices to consumers required by the Gramm-Leach-Bliley Act (GLB Act). The privacy notices must describe an institution’s information sharing practices, and, for certain types of sharing, consumers have the right to opt out. The notices must be provided when a consumer first becomes a customer of a financial institution and then annually for as long as the customer relationship lasts.
Last October, President Bush signed into law the Financial Services Regulatory Relief Act of 2006, amending the GLB Act to require the agencies to propose a model form that is succinct and comprehensible to consumers, allows consumers easily to compare privacy practices of financial institutions, and uses easily readable type font.
The proposed model privacy form is the “prototype privacy notice” developed by six of these federal agencies after a year-long consumer testing process. A detailed report describing the testing and resulting prototype privacy notice was released by these agencies in March 2006. The NPR proposes that a financial institution that chooses to use the model form would satisfy the disclosure requirements for the notices and so could take advantage of a legal “safe harbor.” The NPR also proposes to remove, after a transition period, the sample clauses now included in some of the agencies’ privacy rules.