1. (1)(a) Except as otherwise provided, a licensee may not, directly or through any affiliate, disclose nonpublic personal financial information about a consumer to a nonaffiliated third party unless:

   1. (i) the licensee provides the consumer an initial notice required under Section R590-206-5;

      1. (ii) the licensee provides the consumer an opt out notice required under Section R590-206-8;
      2. (iii) the licensee provides the consumer a reasonable opportunity to opt out of the disclosure before it discloses the information to the nonaffiliated third party; and
      3. (iv) the consumer does not opt out.
   2. (b) Opt out occurs when a consumer directs the licensee to not disclose the consumer's nonpublic personal financial information to a nonaffiliated third party, except as permitted under Sections R590-206-15 through R590-206-17.

2. (2)(a) This Section R590-206-12 applies regardless of whether the licensee and the consumer have a customer relationship.

   1. (b) A licensee may not, directly or through any affiliate, disclose nonpublic personal financial information about a consumer regardless of whether the licensee collected it before or after receiving the direction to opt out.
3. (3) A consumer may select certain nonpublic personal financial information or certain nonaffiliated third parties that the consumer wishes to opt out.

KEY: insurance law

Date of Last Change: November 21, 2023

Notice of Continuation: May 19, 2026

Authorizing, and Implemented or Interpreted Law: 31A-2-201; 31A-23a-417; 15 U.S.C. 6801-6820