Customer Privacy Rules and Disclosures

What this video covers

• Why a consumer list or grouping derived from public information becomes protected NPI when its disclosure indicates an individual is or was the firm's customer
• The exact content required in a customer privacy disclosure: policies and practices, information sharing practices, and outside-firm controls
• Why sharing NPI with a nonaffiliated third party does not end the firm's responsibility for privacy controls or applicable disclosure conditions
• The default opt-out (not opt-in) rule for most disclosures of NPI to nonaffiliated third parties when no exception applies
• Why Regulation S-P requires both a privacy notice and actual written safeguards against unauthorized access or use, not just a disclosure form
• When secure disposal rules apply: reasonable measures and written procedures to protect information even after the customer relationship ends