Regulation S-P; Privacy of consumer financial information (17 CFR Part 248)

Regulation SP implements the requirements of Title V of the Gramm-Leach-Bliley Act (“GLBA”), which includes the requirement that at the time of establishing a customer relationship with a consumer and not less than annually during the continuation of such relationship, a financial institution shall provide a clear and conspicuous disclosure to such consumer of such financial institution’s policies and practices with respect to disclosing nonpublic personal information to affiliates and nonaffiliated third parties (“privacy notice”). Title V of the GLBA also provides that, unless an exception applies, a financial institution may not disclose nonpublic personal information of a consumer to a nonaffiliated third party unless the financial institution clearly and conspicuously discloses to the consumer that such information may be disclosed to such third party; the consumer is given the opportunity, before the time that such information is initially disclosed, to direct that such information not be disclosed to such third party; and the consumer is given an explanation of how the consumer can exercise that nondisclosure option (“opt out notice”).

The latest form for Regulation S-P; Privacy of consumer financial information (17 CFR Part 248) expires 2027-11-30 and can be found here.