,,ib ,union ,cal5d> ,no4 #fgc #aah?     
,,congress  #b;d ,session  ,h4 ,r4 #aafe
 ,report ,no4 #aah-hbb ,,9 ,,! ,,h\se   
,,( ,,repres5tatives  ,febru>y #bd1     
#bjbc,mr4 ,mc,henry introduc$ ! foll[+  
bill2 :i* 0 ref]r$ to ! ,committee on   
,f9ancial ,s]vices  ,decemb] #e1        
#bjbd,report$ ) an am5dm5t2 committ$ to 
! ,committee ( ! ,:ole ,h\se on ! ,/ate 
( ! ,union & ord]$ to be printed,strike 
out all aft] ! enact+ clause & ins]t !  
"p pr9t$ 9 italic,for text ( introduc$  
bill1 see copy ( bill z introduc$ on    
,febru>y #bd1 #bjbc  ,a ,,bill  ,to am5d
 ! ,gramm-,lea*-,bliley ,act to mod]nize
 ! protection ( ! nonpublic p]sonal     
in=mation ( individuals ) :om f9ancial  
in/itutions h cu/om] or consum]         
relation%ip1 & = o!r purposes4  #a4     
,%ort title2 table ( cont5ts  7a7 ,%ort 
title ,?is ,act may be cit$ z ! ,data   
,privacy ,act ( #bjbc4  7b7 ,table (    
cont5ts ,! table ( cont5ts = ?is ,act is
 z foll[s3  ,sec4 #a4 ,%ort title2 table
 ( cont5ts4 ,sec4 #b4 ,protection (     

nonpublic p]sonal in=mation4 ,sec4 #c4  
,obligations ) respect to ! collection &
 disclosure ( nonpublic p]sonal         
in=mation4 ,sec4 #d4 ,disclosure (      
in/itution privacy policy4 ,sec4 #e4    
,rulemak+4 ,sec4 #f4 ,relation to ,/ate 
laws4 ,sec4 #g4 ,obligations ) respect  
to access & deletion ( nonpublic p]sonal
 in=mation4 ,sec4 #h4 ,obligations )    
respect to ! int]national %>+ (         
nonpublic p]sonal in=mation4 ,sec4 #i4  
,def9itions4 ,sec4 #aj4 ,repeal ( expir$
 provisions4 ,sec4 #aa4 ,,gao ,report4  
,sec4 #ab4 ,s5se ( ,congress4 ,sec4 #ac4
 ,effective date4  #b4 ,protection (    
nonpublic p]sonal in=mation ,section    
#eja ( ! ,gramm-,lea*-,bliley ,act 7#ae 
,u4,s4,c4 #fhja7 is am5d$-- 7#a7 9      
subsection 7a7--  7,a7 by /rik+ ( its   
cu/om]s & ins]t+ ( individuals ) :om su*
 f9ancial in/itution has a cu/om] or    
consum] relation%ip2 &  7,b7 by /rik+ ^?
 cu/om]s' nonpublic p]sonal in=mation & 
ins]t+ ^? individual's nonpublic p]sonal
 in=mation2 &  7#b7 by add+ at ! end !  

foll[+3  7c7 ,use ( nonpublic p]sonal   
in=mation ,unless o!rwise p]mitt$ "u    
section #ejb7;e71 x %all be unlawful = a
 f9ancial in/itution to willfully use   
nonpublic p]sonal in=mation )\t ! cons5t
 ( an individual ) :om ! f9ancial       
in/itution has a cu/om] or consum]      
relation%ip4  4  #c4 ,obligations )     
respect to ! collection & disclosure (  
nonpublic p]sonal in=mation  7a7 ,9     
g5]al ,section #ejb ( !                 
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhjb7 is am5d$-- 7#a7 9 ! head+1 by   
/rik+ ,,disclosures ,,( & ins]t+ ,,!    
,,collection ,,& ,,disclosure ,,(       
,,nonpublic2  7#b7 9 subsection 7a7--   
7,a7 by ins]t+ be=e disclose ! foll[+3  
collect nonpublic p]sonal in=mation f an
 individual ) :om su* f9ancial          
in/itution has a cu/om] or consum]      
relation%ip or2 &  7,b7 by /rik+ has    
provid$ to ! consum] & ins]t+ has       
provid$ to su* individual2 &  7#c7 9    
subsection 7b71 by am5d+ p>agraph 7#a7  
to read z foll[s3  7#a7 ,9 g5]al ,a     

f9ancial in/itution may n collect       
nonpublic p]sonal in=mation f an        
individual ) :om su* f9ancial in/itution
 has a cu/om] or consum] relation%ip or 
disclose nonpublic p]sonal in=mation to 
a nonaffiliat$ ?ird p>ty unless !       
individual ) :om su* f9ancial in/itution
 has a consum] or cu/om] relation%ip is 
giv5 ! opportunity1 be=e ! "t t su*     
in=mation is initially collect$ or      
disclos$1 to direct t su* in=mation n be
 collect$ or disclos$ to su* ?ird p>ty4 
2  7#d7 9 subsection 7d7--  7,a7 by     
/rik+ ( a consum] & ins]t+ ( an         
individual ) :om su* f9ancial in/itution
 has a cu/om] or consum] relation%ip2 & 
7,b7 by /rik+ telem>ket+1 direct mail   
m>ket+1 or o!r m>ket+ ?r\gh electronic  
mail to ! consum] & ins]t+ m>ket+ to !  
individual ) :om su* f9ancial in/itution
 has a cu/om] or consum] relation%ip1   
reg>dless ( m$ium2  7#e7 9 subsection   
7e7-- 7,a7 9 ! head+1 by /rik+ ,g5]al2  
7,b7 by /rik+ ,subsections 7a7 & 7b7    
%all n prohibit ! disclosure ( nonpublic

 p]sonal in=mation & ins]t+ ,! g5]al    
collection & disclosure proc$ures       
provid$ 9 subsections 7a7 & 7b7 %all n  
prohibit or o!rwise limit ! collection  
or disclosure ( nonpublic p]sonal       
in=mation2  7,c7 by /rik+ p>agraphs 7#a7
 & 7#b7 & ins]t+ ! foll[+3  7#a7 if !   
collection or disclosure is-- 7,a7      
necess>y to effect1 adm9i/]1 or en=ce a 
transaction reque/$ or au?oriz$ by !    
individual ) :om ! f9ancial in/itution  
has a cu/om] or consum] relation%ip2    
7,b7 9 connection ) s]vic+ or process+ a
 f9ancial product or s]vice reque/$ or  
au?oriz$ by ! individual ) :om !        
f9ancial in/itution has a cu/om] or     
consum] relation%ip2  7,c7 ) ! cons5t or
 at ! direction ( ! individual ) :om !  
f9ancial in/itution has a cu/om] or     
consum] relation%ip1 & ! f9ancial       
in/itution obta9s1 f su* individual1    
evid5ce ( su* individual's au?orization 
= su* collection or disclosure2 or  7,d7
 9 connection )-- 7i7 ma9ta9+ or s]vic+ 
! acc\nt1 ) su* f9ancial in/itution or )

 ano!r entity z "p ( a private label or 
co-br& cr$it c>d program or an ext5sion 
( cr$it on behalf ( su* entity1 ( an    
individual ) :om su* f9ancial in/itution
 or entity has a cu/om] or consum]      
relation%ip2 or  7ii7 a propos$ or      
actual securitization1 second>y m>ket   
sale 7includ+ sales ( s]vic+ rights71 or
 simil> transaction relat$ to an acc\nt 
or a transaction ( ! individual :i* :om 
su* entity or f9ancial in/itution has a 
cu/om] or consum] relation%ip2 or  7#b7 
to a nonaffiliat$ ?ird p>ty to p]=m     
s]vices =1 or functions on behalf (1 !  
f9ancial in/itution1 includ+ m>ket+ ( ! 
f9ancial in/itution's own products or   
s]vices1 or f9ancial products or s]vices
 (f]$ pursuant to jo9t agreem5ts betwe5 
two or m f9ancial in/itutions t comply )
 ! requirem5ts impos$ by ! regulations  
prescrib$ "u section #ejd1 if ! f9ancial
 in/itution fully discloses ! provid+ ( 
su* in=mation & ent]s into a contractual
 agreem5t ) ! ?ird p>ty t requires !    
?ird p>ty to ma9ta9 ! confid5tiality (  

su* in=mation2  2  7,d7 9 p>agraph      
7#c7-- 7i7 9 subp>agraph 7,a7--  7,i7 by
 /rik+ or security & ins]t+ 1 security1 
or integrity2  7,,ii7 by /rik+ p]ta9+ to
 ! consum] & ins]t+ p]ta9+ to !         
individual ) :om ! f9ancial in/itution  
has a cu/om] or consum] relation%ip2    
7,,iii7 by ins]t+ be=e ! semicolon !    
foll[+3 1 z well z ! sy/ems1 processes1 
& s]vices t h&le su* records2  7ii7 9   
subp>agraph 7,b71 by ins]t+ aft] fraud1 
! foll[+3 id5tity !ft12  7iii7 9        
subp>agraph 7,c71 by /rik+ = resolv+    
cu/om] disputes or inquiries & ins]t+ = 
resolv+ disputes or inquires relat+ to  
individuals ) :om ! f9ancial in/itution 
has a cu/om] or consum] relation%ip2    
7iv7 9 subp>agraph 7,d71 by /rik+ relat+
 to ! consum] & ins]t+ relat+ to !      
individual ) :om ! f9ancial in/itution  
has a cu/om] or consum] relation%ip2 &  
7v7 9 subp>agraph 7,e71 by /rik+ behalf 
( ! consum] & ins]t+ behalf ( !         
individual ) :om ! f9ancial in/itution  
has a cu/om] or consum] relation%ip2 &  

7,e7 9 p>agraph 7#g7--  7i7 by /rik+ or 
ex*ange & ins]t+ ex*ange1 or simil>     
transaction2  7ii7 by /rik+ consum]s (  
su* bus9ess or unit & ins]t+ individuals
 ) :om su* bus9ess or unit h a cu/om] or
 consum] relation%ip2 &  7iii7 by ins]t+
 collection or be=e disclosure2  7#f7 by
 add+ at ! end ! foll[+3  7f7           
,notification to nonaffiliates :5 %>+ is
 t]m9at$  7#a7 ,9 g5]al ,if a f9ancial  
in/itution is requir$ to t]m9ate %>+    
nonpublic p]sonal in=mation1 ( an       
individual ) :om su* f9ancial in/itution
 has a cu/om] or consum] relation%ip1 ) 
a nonaffiliat$ ?ird p>ty-- 7,a7 !       
f9ancial in/itution %all notify !       
nonaffiliat$ ?ird p>ty t ! %>+ has be5  
t]m9at$ & t su* nonaffiliat$ ?ird p>ty  
may n %>e any nonpublic in=mation ( !   
individual already receiv$ f ! f9ancial 
in/itution2 &  7,b7 ^u receipt ( a      
notice describ$ "u subp>agraph 7,a71 !  
nonaffiliat$ ?ird p>ty may n %>e any    
nonpublic in=mation ( su* individual    
already receiv$ f ! f9ancial in/itution4

  7#b7 ,rulemak+ ,! ag5cies ref]r$ to 9 
section #ejd %all issue rules to e/abli%
 ! requirem5ts = notices "u p>agraph    
7#a71 includ+ ! =m ( su* notices1 tak+  
into acc\nt any privacy risks pos$ by   
su* notices4  7g7 ,requirem5ts ) respect
 to ! collection ( acc\nt cr$5tials ,a  
f9ancial in/itution may n collect f an  
individual ) :om su* f9ancial in/itution
 has a cu/om] or consum] relation%ip    
acc\nt cr$5tials su* individual uses to 
access an acc\nt at a nonaffiliat$ ?ird 
p>ty t is a f9ancial in/itution unless1 
prior to collect+ ! acc\nt cr$5tials--  
7#a7 ! f9ancial in/itution cle>ly &     
conspicu\sly discloses to ! individual1 
9 a =m p]mitt$ by ! regulations         
prescrib$ "u section #ejd--  7,a7 t !   
f9ancial in/itution is collect+ su*     
acc\nt cr$5tials2  7,b7 h[ su* cr$5tials
 w be us$ by ! f9ancial in/itution2 &   
7,c7 :e!r su* cr$5tials may be disclos$ 
to a nonaffiliat$ ?ird p>ty2 &  7#b7 su*
 individual is giv5 an opportunity to   
direct t su* cr$5tials n be collect$ or 

to direct t su* cr$5tials n be disclos$ 
to any nonaffiliat$ ?ird p>ty4  4  7b7  
,con=m+ am5dm5t ,section #eji7c77;,d7 ( 
! ,gramm-,lea*-,bliley ,act 7#ae        
,u4,s4,c4 #fhji7c77;,d77 is am5d$ by    
/rik+ section #ejb7;e77#a77;,c7 & ins]t+
 section #ejb7;e77#a77;,d77ii74  #d4    
,disclosure ( in/itution privacy policy 
,section #ejc ( ! ,gramm-,lea*-,bliley  
,act 7#ae ,u4,s4,c4 #fhjc7 is am5d$--   
7#a7 9 subsection 7a7-- 7,a7 by /rik+   
cu/om] relation%ip ) a consum] & ins]t+ 
cu/om] or consum] relation%ip2  7,b7 by 
/rik+ cle> & conspicu\s disclosure to   
su* consum] & ins]t+ cle> & conspicu\s  
disclosure to su* individual ) :om su*  
f9ancial in/itution has a cu/om] or     
consum] relation%ip2  7,c7 by r$esignat+
 p>agraphs 7#a71 7#b71 & 7#c7 z         
p>agraphs 7#b71 7#c71 & 7#d71           
respectively2  7,d7 by ins]t+ be=e      
p>agraph 7#b71 z s r$esignat$1 ! foll[+3
  7#a7 collect+ nonpublic p]sonal       
in=mation2  2  7,e7 9 p>agraph 7#c71 z s
 r$esignat$1 by /rik+ h ceas$ to be     

cu/om]s ( & ins]t+ h ceas$ to h a cu/om]
 or consum] relation%ip )2 &  7,f7 9    
p>agraph 7#d71 z s r$esignat$1 by /rik+ 
p]sonal in=mation ( consum]s & ins]t+   
p]sonal in=mation ( individuals ) :om   
su* f9ancial in/itution has a cu/om] or 
consum] relation%ip2  7#b7 by r$esignat+
 subsections 7b7 ?r\gh 7f7 z subsections
 7c7 ?r\gh 7g71 respectively2  7#c7 by  
ins]t+ aft] subsection 7a7 ! foll[+3    
7b7 ,disclosure ^u reque/ ,^u ! reque/ (
 an individual ) :om a f9ancial         
in/itution has a cu/om] or consum]      
relation%ip1 a f9ancial in/itution %all 
provide su* individual ) a copy ( !     
disclosures requir$ by subsection 7a7 9 
writ+ or 9 electronic or o!r =m z       
p]mitt$ by ! regulations prescrib$ "u   
section #ejd4  2 &  7#d7 9 subsection   
7d71 z s r$esignat$--  7,a7 9 p>agraph  
7#a7-- 7i7 by ins]t+ collect+ or be=e   
disclos+ nonpublic2 &  7ii7 by /rik+    
subp>agraph 7,b7 & ins]t+ ! foll[+3     
7,b7 ! purpose = :i* ! f9ancial         
in/itution collects ! nonpublic p]sonal 

in=mation ( individuals ) :om ! f9ancial
 in/itution has a cu/om] or consum]     
relation%ip1 z well z h[ ! in=mation w  
be us$2  2  7,b7 9 p>agraph 7#b71 by    
ins]t+ be=e ! semicolon ! foll[+3 1     
provid$ 9 a mann] t provides individuals
 ) :om ! f9ancial in/itution has a      
cu/om] or consum] relation%ip a mean+ful
 und]/&+ ( ! in=mation t is collect$2   
7,c7 9 p>agraph 7#c71 by /rik+ & at !   
end2  7,d7 9 p>agraph 7#d71 by /rik+ !  
p]iod at ! end & ins]t+ a semicolon2 &  
7,e7 by add+ at ! end ! foll[+3  7#e7 if
 ! f9ancial in/itution collects         
nonpublic p]sonal in=mation = any       
purpose o!r ?an to provide a specific   
product or s]vice su* an individual is  
seek+-- 7,a7 a description ( su*        
in=mation2  7,b7 ! purpose = :i* su*    
in=mation is collect$2 &  7,c7 ! "r (   
su* individual to opt out ( hav+ su*    
nonpublic p]sonal in=mation collect$ or 
disclos$ to a nonaffiliat$ ?ird p>ty1 & 
! mann] 9 :i* su* individual may make   
su* opt out election2  7#f7 ! data      

ret5tion policies ( ! f9ancial          
in/itution1 includ+-- 7,a7 ! p]iod ( "t 
= :i* ! f9ancial in/itution reta9s !    
nonpublic p]sonal in=mation relat+ to   
su* individual2 or  7,b7 ! crit]ia us$  
by ! f9ancial in/itution to det]m9e !   
p]iod ( "t = :i* su* in=mation is       
reta9$2  7#g7 ! "r ( su* individual to  
direct ! f9ancial in/itution to t]m9ate 
! %>+ ( nonpublic p]sonal in=mation ) a 
nonaffiliat$ ?ird p>ty1 & ! mann] 9 :i* 
su* individual may make su* direction2  
7#h7 ! "r ( su* individual to reque/ t !
 f9ancial in/itution provide !          
individual ) a li/ ( all nonpublic      
p]sonal in=mation relat+ to ! individual
 held by ! f9ancial in/itution1 & !     
mann] 9 :i* ! individual may make su*   
reque/2 &  7#i7 ! "r ( su* individual to
 direct ! f9ancial in/itution to delete 
nonpublic p]sonal in=mation ( !         
individual held by ! f9ancial in/itution
 7subject to ! exceptions provid$ "u    
section #ejb;,a7b77#c771 & ! mann] 9 :i*
 ! individual may make su* direction4  2

  7#e7 9 subsection 7f71 z s            
r$esignat$-- 7,a7 9 p>agraph 7#b77;,a71 
by /rik+ to consum]s & ins]t+ to        
individuals ) :om a f9ancial in/itution 
has a cu/om] or consum] relation%ip2 &  
7,b7 9 p>agraph 7#b77;,c71 by /rik+     
enable consum]s & ins]t+ enable         
individuals ) :om a f9ancial in/itution 
has a cu/om] or consum] relation%ip2 &  
7#f7 9 subsection 7g71 z s r$esignat$1  
by /rik+ s5t to consum]s & ins]t+ s5t to
 individuals ) :om a f9ancial in/itution
 has a cu/om] or consum] relation%ip4   
#e4 ,rulemak+ ,section #ejd ( !         
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhjd7 is am5d$-- 7#a7 9 subsection    
7a77#a7--  7,a7 by /rik+ subp>agraph    
7,d7 & ins]t+ ! foll[+3  7,d7 ,insurance
  7i7 ,9 g5]al ,) respect to any p]son  
engag$ 9 provid+ insurance1 ! applicable
 ,/ate insurance au?ority ( ! ,/ate 9   
:i* ! p]son is domicil$ %all issue      
regulations z may be necess>y to c>ry   
out ! purposes ( ?is subtitle1 subject  
to section #eje7;c74  7ii7 ,limitation  

,regulations issu$ by a ,/ate insurance 
au?ority "u ?is subp>agraph may be no m 
re/rictive = a p]son engag$ 9 provid+   
insurance ?an ^? regulations issu$ by ! 
ag5cies coord9at+ = consi/5cy &         
comp>ability "u p>agraph 7#b74  2 &     
7#b7 by add+ at ! end ! foll[+3  7c7    
,consid]ation ( compliance co/s ,:5     
prescrib+ rules "u ?is subtitle1 ag5cies
 %all take into acc\nt ! compliance co/ 
su* rules w impose on small in/itutions4
  4  #f4 ,relation to ,/ate laws        
,section #ejg ( ! ,gramm-,lea*-,bliley  
,act 7#ae ,u4,s4,c4 #fhjg7 is am5d$ to  
read z foll[s3  #ejg4 ,relation to ,/ate
 laws ,?is subtitle & ! am5dm5ts made by
 ?is subtitle sup]s$e any /atute or rule
 ( a ,/ate or political subdivision !re(
 t regulates ! obligations ( a f9ancial 
in/itution ) respect to-- 7#a7 !        
collection or disclosure ( p]sonal      
in=mation2  7#b7 ! disclosure ( !       
f9ancial in/itution's privacy policy or 
in=mation ab\t ! f9ancial in/itution's  
privacy policies & practices2  7#c7 !   

access to1 deletion (1 or o!r individual
 privacy rights ) respect to p]sonal    
in=mation2 or  7#d7 ! int]national %>+ (
 p]sonal in=mation4  4  #g4 ,obligations
 ) respect to access & deletion (       
nonpublic p]sonal in=mation  7a7 ,9     
g5]al ,title ,v ( ! ,gramm-,lea*-,bliley
 ,act 7#ae ,u4,s4,c4 #fhja et seq47 is  
am5d$ by ins]t+ aft] section #ejb !     
foll[+3  #ejb;,a4 ,obligations ) respect
 to access & deletion ( nonpublic       
p]sonal in=mation  7a7 ,access to       
in=mation  7#a7 ,9 g5]al ,^u an au?oriz$
 reque/ f an individual ) :om a f9ancial
 in/itution has a cu/om] or consum]     
relation%ip1 a f9ancial in/itution %all 
disclose-- 7,a7 any nonpublic p]sonal   
in=mation relat+ to su* individual held 
by ! f9ancial in/itution2  7,b7 ! li/ ( 
categories ( nonaffiliat$ ?ird p>ties ) 
:om ! f9ancial in/itution %>es nonpublic
 p]sonal in=mation relat+ to su*        
individual2 &  7,c7 ! li/ ( categories (
 nonaffiliat$ ?ird p>ties f :om !       
f9ancial in/itution has receiv$         

nonpublic p]sonal in=mation relat+ to   
su* individual4  7#b7 ,=mat ,disclosures
 describ$ "u p>agraph 7#a7 %all be 9 a  
/ructur$1 commonly us$1 & ma*9e-readable
 =mat4  7#c7 ,exception ,= purposes (   
subp>agraphs 7,b7 & 7,c7 ( p>agraph     
7#a71 a f9ancial in/itution is n requir$
 to disclose a nonaffiliat$ ?ird p>ty ) 
:om ! f9ancial in/itution %>es or       
receives nonpublic p]sonal in=mation    
relat+ to su* individual pursuant to an 
exception describ$ "u any ( p>agraphs   
7#c7 ?r\gh 7#h7 ( section #ejb7;e74  7b7
 ,deletion ( in=mation  7#a7 ,9 g5]al   
,^u an au?oriz$ reque/ f an individual )
 :om a f9ancial in/itution has a cu/om] 
or consum] relation%ip1 a f9ancial      
in/itution %all delete any nonpublic    
p]sonal in=mation relat+ to su*         
individual held by ! f9ancial           
in/itution4  7#b7 ,c]ta9 inactive       
acc\nts ,if su* individual has n us$ a  
product or s]vice provid$ by a f9ancial 
in/itution = #a ye>1 ! f9ancial         
in/itution %all--  7,a7 notify su*      

individual t su* individual has ! "r to 
reque/ ! deletion ( any nonpublic       
p]sonal in=mation relat+ to su*         
individual held by ! f9ancial           
in/itution1 & provide su* individual )  
cle> in/ructions on h[ to make su*      
reque/2 &  7,b7 = ea* additional #a-ye> 
p]iod ) respect to :i* su* p]son        
cont9ues to n use a product or s]vice ( 
! f9ancial in/itution1 res5d ! notice   
describ$ "u subp>agraph 7,a74  7#c7     
,exception  7,a7 ,9 g5]al ,?is          
subsection %all n require a f9ancial    
in/itution to delete nonpublic p]sonal  
in=mation if-- 7i7 ! f9ancial in/itution
 is o!rwise requir$ by law to reta9 !   
nonpublic p]sonal in=mation2  7ii7 !    
nonpublic p]sonal in=mation may be      
necess>y to respond to a dispute "u !   
,fair ,cr$it ,report+ ,act2 or  7iii7 ! 
nonpublic p]sonal in=mation may be      
necess>y to reta9 = a purpose describ$ 9
 an exception "u section #ejb7;e74  7,b7
 ,limitation on reta9$ nonpublic p]sonal
 in=mation ,) respect to nonpublic      

p]sonal in=mation t a f9ancial          
in/itution w\ld be requir$ to delete "u 
?is subsection b = ! application ( ?is  
p>agraph1 ! f9ancial in/itution may only
 use su* nonpublic p]sonal in=mation = !
 applicable purpose describ$ "u         
subp>agraph 7,a74  7c7 ,tim+ ,a f9ancial
 in/itution t receives an au?oriz$      
reque/1 "u ?is section1 f an individual 
) :om su* f9ancial in/itution has a     
cu/om] or consum] relation%ip1 %all     
respond )9 #de bus9ess days4  7d7       
,rulemak+ ,n lat] ?an ! end ( ! #a-ye>  
p]iod beg9n+ on ! date ( enactm5t ( ?is 
section1 ea* ag5cy or au?ority describ$ 
9 section #ejd %all issue rules to c>ry 
out ?is section ) respect to ! f9ancial 
in/itutions subject to its jurisdiction4
  4  7b7 ,cl]ical am5dm5t ,! table (    
cont5ts 9 section #a7;b7 ( !            
,gramm-,lea*-,bliley ,act is am5d$ by   
ins]t+ aft] ! item relat+ to section    
#ejb ! foll[+3  ,sec4 #ejb;,a4          
,obligations ) respect to access &      
deletion ( nonpublic p]sonal in=mation4 

4  #h4 ,obligations ) respect to !      
int]national %>+ ( nonpublic p]sonal    
in=mation  7a7 ,9 g5]al ,title ,v ( !   
,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4
 #fhja et seq471 z am5d$ by section #aj1
 is fur!r am5d$ by ins]t+ aft] section  
#ejb;,a ! foll[+3  #ejb;,b4 ,obligations
 ) respect to ! int]national %>+ (      
nonpublic p]sonal in=mation  7a7 ,9     
g5]al ,a f9ancial in/itution may n %>e )
 a =eign gov]nm5t nonpublic p]sonal     
in=mation relat+ to an individual ) :om 
su* f9ancial in/itution has a cu/om] or 
consum] relation%ip4  7b7 ,law en=cem5t 
exception ,subsection 7a7 %all n apply  
to ! %>+ ( ! nonpublic p]sonal in=mation
 relat+ to su* an individual ) a =eign  
gov]nm5t au?ority if su* %>+ is-- 7#a7  
done = legitimate law en=cem5t purposes2
 or  7#b7 to a =eign gov]nm5t au?ority  
hav+ jurisdiction ov] ! f9ancial        
in/itution = exam9ation1 compliance1 or 
o!r purposes z au?oriz$ by law4  4  7b7 
,cl]ical am5dm5t ,! table ( cont5ts 9   
section #a7;b7 ( ! ,gramm-,lea*-,bliley 

,act1 z am5d$ by section #aj1 is fur!r  
am5d$ by ins]t+ aft] ! item relat+ to   
section #ejb;,a ! foll[+3  ,sec4        
#ejb;,b4 ,obligations ) respect to !    
int]national %>+ ( nonpublic p]sonal    
in=mation  4  #i4 ,def9itions ,section  
#eji ( ! ,gramm-,lea*-,bliley ,act 7#ae 
,u4,s4,c4 #fhji7 is am5d$-- 7#a7 9      
p>agraph 7#c77;,a71 by ins]t+ be=e !    
p]iod at ! end ! foll[+3 & includes a   
data aggregator2  7#b7 9 p>agraph 7#d71 
by /rik+ p]sonally id5tifiable f9ancial 
in=mation & ins]t+ in=mation t          
id5tifies1 relates to1 describes1 is    
reasonably capable ( be+ associat$ )1 or
 c\ld reasonably be l9k$1 directly or   
indirectly1 ) a p>ticul> individual &   
is2  7#c7 9 p>agraph 7#g71 by ins]t+    
collection or be=e disclosure ea* place 
su* t]m appe>s2  7#d7 by /rik+ p>agraph 
7#i72  7#e7 by am5d+ p>agraph 7#aa7 to  
read z foll[s3  7#aa7 ,cu/om] or consum]
 relation%ip  7,a7 ,9 g5]al ,! t]m      
cu/om] or consum] relation%ip means a   
cu/om] relation%ip or a consum]         

relation%ip4  7,b7 ,cu/om] relation%ip  
,! t]m cu/om] relation%ip %all h ! mean+
 giv5 ! t]m 9 rules issu$ pursuant to   
section #ejd4  7,c7 ,consum]            
,relation%ip ,! t]m consum] relation%ip 
%all h ! mean+ giv5 ! t]m 9 rules issu$ 
pursuant to section #ejd & su* mean+    
%all-- 7i7 include situations 9 :i* a   
f9ancial in/itution obta9s nonpublic    
in=mation f an individual ) :om !       
f9ancial in/itution does n h a cu/om]   
relation%ip2 &  7ii7 deem a f9ancial    
in/itution to no long] to be 9 a consum]
 relation%ip ) an individual at su* "t z
 ! f9ancial in/itution no long]         
collects1 controls1 possesses1          
transmits1 or ma9ta9s any nonpublic     
p]sonal in=mation ( su* individual4     
7,d7 ,treatm5t ( c]ta9 transactions ,:5 
! t]ms cu/om] relation%ip & consum]     
relation%ip are def9$ by rule1 x %all be
 specifi$ t ! foll[+ transactions d n1  
by !mselves1 e/abli% a consum]          
relation%ip or a consum] relation%ip3   
7i7 ,! use ( an automat$ tell] ma*9e4   

7ii7 ,! use ( a cr$it c>d or debit c>d  
to make a pur*ase4  7iii7 ,su* o!r      
simil> transactions z ! ag5cies det]m9e 
appropriate4  2 &  7#f7 by add+ at ! end
 ! foll[+3  7#ab7 ,acc\nt cr$5tials ,!  
t]m acc\nt cr$5tials means nonpublic    
p]sonal in=mation t an individual ) :om 
a f9ancial in/itution has a cu/om] or   
consum] relation%ip uses to access an   
acc\nt ( ! individual at su* f9ancial   
in/itution1 includ+ a us]name1 password1
 or an answ] to a security "q4  7#ac7   
,data aggregator ,! t]m data            
aggregator--  7,a7 means any p]son t    
op]ates a comm]cial bus9ess or ent]prise
 = ! bus9ess purpose ( access+1         
aggregat+1 collect+1 sell+1 or %>+      
nonpublic p]sonal in=mation ab\t        
f9ancial acc\nts or transactions relat+ 
to an individual2 &  7,b7 does n        
include--  7i7 a s]vice provid] act+ at 
! express in/ruction ( a f9ancial       
in/itution t accesses1 aggregates1      
collects1 or %>es nonpublic p]sonal     
in=mation ab\t an individual ) :om su*  

f9ancial in/itution has a cu/om] or     
consum] relation%ip 9 accordance )      
p>agraphs 7#a71 7#b71 7#c77;,a71        
7#c77;,b71 7#c77;,c71 7#c77;,d71 or 7#f7
 ( section #ejb7;e72 or  7ii7 an        
attorney or acc\ntant act+ on behalf (  
an individual ) :om su* attorney or     
acc\ntant has a cu/om] or consum]       
relation%ip1 9 accordance ) section     
#ejb7;e77#c77;,e74  7#ad7 ,p]son engag$ 
9 provid+ insurance ,! t]m p]son engag$ 
9 provid+ insurance means a p]son t     
engages 9 ! bus9ess ( insurance1 z t t]m
 is def9$ 9 section #ajjb ( !           
,dodd-,frank ,wall ,/reet ,re=m &       
,consum] ,protection ,act 7#ab ,u4,s4,c4
 #edha74  4  #aj4 ,repeal ( expir$      
provisions ,! ,gramm-,lea*-,bliley ,act 
is am5d$--  7#a7 by /rik+ section #ejh  
7#ae ,u4,s4,c4 #fhjh72 &  7#b7 9 ! table
 ( cont5ts 9 section #a7;b71 by /rik+ ! 
item relat+ to section #ejh4  #aa4 ,,gao
 report  7a7 ,9 g5]al ,! ,comptroll]    
,g5]al ( ! ,unit$ ,/ates %all1 n lat]   
?an #a ye> aft] ! date ( ! enactm5t (   

?is ,act1 submit to ! ,congress a report
 t assesses-- 7#a7 :e!r ! safegu>d /&>ds
 promulgat$ pursuant to section #eja ( !
 ,gramm-,lea*-,bliley ,act1 includ+     
protect+ aga9/ unau?oriz$ disclosure1   
are effective 9 protect+ individuals )  
:om f9ancial in/itutions h a cu/om] or  
consum] relation%ip2 &  7#b7 :e!r !     
en=cem5t regime ) respect to ^? /&>ds   
are effective 9 protect+ cu/om]s &      
consum]s1 & :e!r additional rem$ies are 
necess>y4  7b7 ,def9itions ,9 ?is       
section1 ! t]ms cu/om] or consum]       
relation%ip & f9ancial in/itution h !   
mean+ giv5 ^? t]ms1 respectively1 "u    
section #eji ( ! ,gramm-,lea*-,bliley   
,act 7#ae ,u4,s4,c4 #fhji71 z am5d$ by  
section #i4  #ab4 ,s5se ( ,congress ,x  
is ! s5se ( ! ,congress t ! ,f$]al      
ag5cies implem5t+ ! ,gramm-,lea*-,bliley
 ,act %\ld implem5t su* ,act1 to ! ext5t
 possible1 9 a te*nology-agno/ic mann] s
 z to ensure x c adapt to diff]5t       
bus9ess models & te*nologies4  #ac4     
,effective date ,! am5dm5ts made by ?is 

,act %all take effect on ! date t is !  
e>li] (--  7#a7 ! date t is "o ye> aft] 
! date on :i* all rulemak+ requir$ "u   
?is ,act is complete2 or  7#b7 ! date t 
is #b ye>s aft] ! date ( ! enactm5t (   
?is ,act4