ARSD 20:06:45 – Privacy of Consumer Financial and Health Information | Midpage

Collections
Administrative Rules of South Dakota

Chapter 20:06:45

ARSD 20:06:45

Privacy of Consumer Financial and Health Information

20:06:45:01Purpose and scope.20:06:45:02Rule of construction.20:06:45:03Definitions.20:06:45:04Initial privacy notice to consumers required.20:06:45:05Annual privacy notice to customers required.20:06:45:06Information to be included in privacy notices.20:06:45:07Form of opt out notice to consumers and opt out methods.20:06:45:08Revised privacy notices.20:06:45:09Delivery.20:06:45:10Limits on disclosure of nonpublic personal financial information to nonaffiliated third parties.20:06:45:11Limits on redisclosure and reuse of nonpublic personal financial information.20:06:45:12Limits on sharing account number information for marketing purposes.20:06:45:13Exception to opt out requirements for disclosure of nonpublic personal financial information for service providers and joint marketing.20:06:45:14Exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information for processing and servicing transactions.20:06:45:15Other exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information.20:06:45:16Protection of Fair Credit Reporting Act.20:06:45:17Nondiscrimination.20:06:45:18Effective date.20:06:45:19Obligation to provide information to director.20:06:45:20Information security program.20:06:45:21Objectives of information security program.20:06:45:22Examples of methods of development and implementation.20:06:45:23Assess risk.20:06:45:24Manage and control risk.20:06:45:25Oversee service provider arrangements.20:06:45:26Adjust the program.20:06:45:27Disclosure of nonpublic personal health information.20:06:45:28Authorization to disclose nonpublic personal health information.20:06:45:29Authorization delivery.20:06:45:30Relationship to federal rules.20:06:45:31Relationship to state laws.20:06:45:0ASample clauses.