1. (a) If a licensee receives, under an exception in 3 AAC 26.665 or 3 AAC 26.670, nonpublic personal financial information from a financial institution that is not an affiliate, the licensee may only disclose or use the information by

   1. (1) disclosing the information to the affiliates of the nonaffiliated third party from which the licensee received the information;
   2. (2) disclosing the information to the licensee's affiliates only if the affiliates agree to disclose and use the information only to the extent that the licensee may disclose and use the information; or
   3. (3) disclosing and using the information under an exception in 3 AAC 26.665 or 3 AAC 26.670 in the ordinary course of business to carry out the activity for which the licensee received the information.

2. (b) If a licensee receives, other than under an exception in 3 AAC 26.665 or 3 AAC 26.670, nonpublic personal financial information from a financial institution that is not an affiliate, the licensee may disclose the information only

   1. (1) to an affiliate of the nonaffiliated financial institution;
   2. (2) to an affiliate of the licensee if the affiliate agrees to disclose the information only to the extent that the licensee is allowed by law to disclose the information; or
   3. (3) to any other person, if the disclosure is allowed by law when made directly to the person by the nonaffiliated financial institution.

3. (c) If a licensee discloses nonpublic personal financial information to a nonaffiliated third party under an exception in 3 AAC 26.665 or 3 AAC 26.670, the nonaffiliated third party may disclose and use the information only by

   1. (1) disclosing the information to the licensee's affiliates;
   2. (2) disclosing the information to the nonaffiliated third party's affiliates but only if those affiliates agree to disclose and use the information only to the extent that the nonaffiliated third party may disclose and use the information; and
   3. (3) using the information under an exception in 3 AAC 26.665 or 3 AAC 26.670 in the ordinary course of business to carry out the purpose for which the nonaffiliated third party received the information.

4. (d) If a licensee discloses nonpublic personal financial information to a nonaffiliated third party other than under an exception in 3 AAC 26.665 or 3 AAC 26.670, the nonaffiliated third party may disclose the information only

   1. (1) to an affiliate of the licensee;
   2. (2) to an affiliate of the nonaffiliated third party, if the affiliate agrees to disclose the information only to the extent that the nonaffiliated third party is allowed by law to disclose the information; or
   3. (3) to any other person, if the disclosure is allowed by law when made directly to the person by the nonaffiliated third party.

(Eff. 1/1/2005, Register 172)