15 U.S.C. § 6803 : US Code - Section 6803: Disclosure of institution privacy policy

Search 15 U.S.C. § 6803 : US Code - Section 6803: Disclosure of institution privacy policy

(a) Disclosure required
At the time of establishing a customer relationship with a
consumer and not less than annually during the continuation of such
relationship, a financial institution shall provide a clear and
conspicuous disclosure to such consumer, in writing or in
electronic form or other form permitted by the regulations
prescribed under section 6804 of this title, of such financial
institution's policies and practices with respect to -
(1) disclosing nonpublic personal information to affiliates and
nonaffiliated third parties, consistent with section 6802 of this
title, including the categories of information that may be
disclosed;
(2) disclosing nonpublic personal information of persons who
have ceased to be customers of the financial institution; and
(3) protecting the nonpublic personal information of consumers.
Such disclosures shall be made in accordance with the regulations
prescribed under section 6804 of this title.
(b) Information to be included
The disclosure required by subsection (a) of this section shall
include -
(1) the policies and practices of the institution with respect
to disclosing nonpublic personal information to nonaffiliated
third parties, other than agents of the institution, consistent
with section 6802 of this title, and including -
(A) the categories of persons to whom the information is or
may be disclosed, other than the persons to whom the
information may be provided pursuant to section 6802(e) of this
title; and
(B) the policies and practices of the institution with
respect to disclosing of nonpublic personal information of
persons who have ceased to be customers of the financial
institution;
(2) the categories of nonpublic personal information that are
collected by the financial institution;
(3) the policies that the institution maintains to protect the
confidentiality and security of nonpublic personal information in
accordance with section 6801 of this title; and
(4) the disclosures required, if any, under section
1681a(d)(2)(A)(iii) of this title.