§332.8. Revised privacy notices. — Inbound Citations

(1) You may provide a revised privacy notice, under § 332.8, that covers the customer's new financial product or service; or

(a) The initial, annual and revised privacy notices that you provide under §§ 332.4, 332.5, and 332.8 must include each of the following items of information, in addition to any other information you wish to provide, that applies to you and to the consumers to whom you send your privacy notice:

(1) The categories of nonpublic personal information that you collect;

(2) The categories of nonpublic personal information that you disclose;

(3) The categories of affiliates and nonaffiliated third parties to whom you disclose nonpublic personal information, other than those parties to whom you disclose information under §§ 332.14 and 332.15;

(4) The categories of nonpublic personal information about your former customers that you disclose and the categories of affiliates and nonaffiliated third parties to whom you disclose nonpublic personal information about your former customers, other than those parties to whom you disclose information under §§ 332.14 and 332.15;

(5) If you disclose nonpublic personal information to a nonaffiliated third party under § 332.13 (and no other exception in § 332.14 or 332.15 applies to that disclosure), a separate statement of the categories of information you disclose and the categories of third parties with whom you have contracted;

(6) An explanation of the consumer's right under § 332.10(a) to opt out of the disclosure of nonpublic personal information to nonaffiliated third parties, including the method(s) by which the consumer may exercise that right at that time;

(7) Any disclosures that you make under section 603(d)(2)(A)(iii) of the Fair Credit Reporting Act (15 U.S.C. 1681a(d)(2)(A)(iii)) (that is, notices regarding the ability to opt out of disclosures of information among affiliates);

(8) Your policies and practices with respect to protecting the confidentiality and security of nonpublic personal information; and

(1) For customers only, you must provide the initial notice required by § 332.4(a)(1), the annual notice required by § 332.5(a), and the revised notice required by § 332.8 so that the customer can retain them or obtain them later in writing or, if the customer agrees, electronically.

(g) If two or more consumers jointly obtain a financial product or service from you, you may satisfy the initial, annual, and revised notice requirements of §§ 332.4(a), 332.5(a), and 332.8(a), respectively, by providing one notice to those consumers jointly.