View Rule

Title LXXV of the Fixing America’s Transportation Act, entitled the Eliminate Privacy Notices Confusion Act, amended the Gramm-Leach-Bliley Act (GLBA) to add new section 503(f). Section 503(f) provides that financial institutions are no longer required to provide annual privacy notices as long as: (1) they have not changed their privacy policies since the last time their customers received a privacy notice, and (2) they only share customers’ financial information with others in a manner that is exempt from notice and opt-out requirements. Section 503(f) was effective upon enactment. In consultation and cooperation with other agencies with GLBA rule writing authority, the Bureau issued a proposal in July 2016 to make minor technical modifications and clarifications to Regulation P to incorporate section 503(f). The proposal amends Regulation P, which requires, among other things, that financial institutions provide an annual notice describing their privacy policies and practices to their customers. The comment period for that proposal ended on August 10, 2016, and the Bureau expects to issue a final rule in fall 2016.