,i #aai? ,,congress #b;d ,session ,h4 ,r4 #hcih ,,9 ,,! ,,h\se ,,( ,,repres5tatives ,april #ba1 #bjbf,mr4 ,huiz5ga 7= himself1 ,mr4 ,b>r1 ,mr4 ,/eil1 & ,mr4 ,hill ( ,arkansas7 introduc$ ! foll[+ bill2 :i* 0 ref]r$ to ! ,committee on ,f9ancial ,s]vices ,a ,,bill ,to make improvem5ts to title ,v ( ! ,gramm-,lea*-,bliley ,act1 & = o!r purposes4 #a4 ,%ort title2 table ( cont5ts 7a7 ,%ort title ,?is ,act may be cit$ z ! ,guidel9es = ,use1 ,access1 & ,responsible ,disclosure ( ,f9ancial ,data ,act or ! ,,gu>d ,f9ancial ,data ,act4 7b7 ,table ( cont5ts ,! table ( cont5ts = ?is ,act is z foll[s3 ,sec4 #a4 ,%ort title2 table ( cont5ts4 ,title ,i--,improvem5ts to ,treatm5t ( ,consum] ,f9ancial ,data ,sec4 #aja4 ,subtitle & section head+ alt]ations4 ,sec4 #ajb4 ,data m9imization4 ,sec4 #ajc4 ,cont9u+ consum] opt out "r4 ,sec4 #ajd4 ,limits on use ( consum] access cr$5tials4 ,sec4 #aje4 ,additional in=mation to be includ$ 9 notices to consum]s4 ,sec4 #ajf4 ,cu/om] access to privacy & disclosure policies4 ,sec4 #ajg4 ,reque/s = disclosure ( or deletion ( nonpublic p]sonal in=mation4 ,sec4 #ajh4 ,opt 9 = s5sitive nonpublic p]sonal in=mation4 ,title ,,ii--,regulatory ,consid]ation = ,small ,f9ancial ,in/itutions ,sec4 #bja4 ,regulatory consid]ation = small f9ancial in/itutions4 ,title ,,iii--,relation to ,o!r ,laws ,sec4 #cja4 ,relation to ,/ate laws4 ,title ,,iv--,additions to ,def9itions ,sec4 #dja4 ,additions to def9itions4 ,i ,improvem5ts to ,treatm5t ( ,consum] ,f9ancial ,data #aja4 ,subtitle & section head+ alt]ations ,! ,gramm-,lea*-,bliley ,act is am5d$-- 7#a7 9 title ,v 7#ae ,u4,s4,c4 #fhja et seq47-- 7,a7 9 subtitle ,a1 9 ! head+ ( ! subtitle1 by /rik+ ,disclosure & ins]t+ ,treatm5t2 & 7,b7 9 section #ejb1 by /rik+ ,,disclosures ,,( & ins]t+ ,,nonpublic2 & 7#b7 9 ! table ( cont5ts = su* ,act-- 7,a7 9 ! item relat+ to subtitle ,a ( title ,v1 by /rik+ ,disclosure & ins]t+ ,treatm5t2 & 7,b7 9 ! item relat+ to section #ejb1 by /rik+ disclosures ( & ins]t+ nonpublic4 #ajb4 ,data m9imization 7a7 ,9 g5]al ,section #ejb ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjb7 is am5d$-- 7#a7 9 subsection 7e71 by /rik+ ,subsections 7a7 & 7b7 & ins]t+ ,subsections 7a71 7b71 & 7f72 7#b7 9 subsection 7e71 by ins]t+ collection or be=e disclosure2 & 7#c7 by add+ at ! end ! foll[+3 7f7 ,data m9imization 7#a7 ,9 g5]al ,a f9ancial in/itution %all limit ! collection or disclosure ( nonpublic p]sonal in=mation to :at is adequate1 relevant1 & reasonably necess>y 9 relation to ea* purpose = :i* ! nonpublic p]sonal in=mation is collect$ or disclos$1 & if su* collection or disclosure is n o!rwise prohibit$ by ?is subtitle or ! am5dm5ts made by ?is subtitle4 7#b7 ,rule ( con/ruction ,no?+ 9 p>agraph 7#a7 %all be con/ru$ to prev5t a f9ancial in/itution f disclos+ nonpublic p]sonal in=mation-- 7,a7 to a nonaffiliat$ ?ird p>ty pursuant to subsection 7b77#b72 7,b7 to a nonaffiliat$ ?ird p>ty z requir$ by section #ajcc ( ! ,consum] ,f9ancial ,protection ,act ( #bjaj 7#ab ,u4,s4,c4 #eecc72 7,c7 to comply ) a reque/ f a consum] report+ ag5cy 7z def9$ 9 section #fjc7;f7 ( ! ,fair ,cr$it ,report+ ,act 7#ae ,u4,s4,c4 #afha;a7f777 to ! ext5t ! consum] report+ ag5cy is engag$ 9 activities subject to ! ,fair ,cr$it ,report+ ,act2 7,d7 to an ag5cy ) regulatory jurisdiction ov] ! f9ancial in/itution2 7,e7 to a self-regulatory organization ( :i* ! f9ancial in/itution is a memb]2 7,f7 z o!rwise p]mitt$ or requir$ by ?is subtitle2 or 7,g7 z o!rwise requir$ by law4 4 7b7 ,effective date ,?is section %all take effect #b ye>s aft] ! date ( enactm5t ( ?is ,act4 #ajc4 ,cont9u+ consum] opt out "r ,section #ejb7;b77#a7 ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjb7;b77#a77 is am5d$-- 7#a7 9 subp>agraph 7,b71 by ins]t+ aft] initially disclos$ ! foll[+3 & ) t opportunity ex]cisable by ! consum] at any "t !reaft]2 & 7#b7 9 subp>agraph 7,c71 by ins]t+ be=e ! p]iod at ! end ! foll[+3 be=e ! "t t su* in=mation is initially disclos$ & ) t explanation accessible to ! consum] at any "t !reaft]4 #ajd4 ,limits on use ( consum] access cr$5tials 7a7 ,9 g5]al ,section #ejb ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjb71 z am5d$ by section #ajb7c71 is fur!r am5d$ by add+ at ! end ! foll[+3 7g7 ,limits on use ( consum] access cr$5tials 7#a7 ,notice & opt out ,a f9ancial data aggregator or nonaffiliat$ ?ird p>ty may n use ! access cr$5tials ( a consum] to access an electronic =m ( ! consum]'s acc\nt at1 or o!rwise obta9 an electronic =m ( nonpublic p]sonal in=mation ( ! consum] f1 a f9ancial in/itution unless-- 7,a7 be=e ! "t t su* access cr$5tials are initially collect$1 ! f9ancial data aggregator or nonaffiliat$ ?ird p>ty provides a cle> & conspicu\s disclosure to su* consum] t includes-- 7i7 h[ ! f9ancial data aggregator or nonaffiliat$ ?ird p>ty w use su* access cr$5tials2 7ii7 :e!r ! f9ancial data aggregator or nonaffiliat$ ?ird p>ty w disclose su* access cr$5tials to a ?ird p>ty n affiliat$ ) ! f9ancial data aggregator or nonaffiliat$ ?ird p>ty2 & 7iii7 a notification (-- 7,i7 ! risks to privacy & security ( nonpublic p]sonal in=mation associat$ ) use ( access cr$5tials to obta9 nonpublic p]sonal in=mation held by a f9ancial in/itution2 & 7,,ii7 ! practices ( ! f9ancial data aggregator or nonaffiliat$ ?ird p>ty to ensure ! privacy & security ( nonpublic p]sonal in=mation obta9$ us+ access cr$5tials2 & 7,b7 ! consum] is giv5 ! opportunity to direct t su* access cr$5tials n be us$ to access ! consum]'s acc\nt at1 or o!rwise obta9 nonpublic p]sonal in=mation ( ! consum] f1 ! f9ancial in/itution4 7#b7 ,treatm5t ( access cr$5tial-bas$ reque/ ,a f9ancial in/itution may n d5y a disclosure reque/ f a f9ancial data aggregator or a nonaffiliat$ ?ird p>ty us+ ! access cr$5tials ( a consum] if ! consum]-- 7,a7 has receiv$ ! disclosure describ$ 9 p>agraph 7#a77;,a72 & 7,b7 has be5 giv5 ! opportunity to direct t su* access cr$5tials n be us$1 z describ$ 9 p>agraph 7#a77;,b74 7#c7 ,rule ( con/ruction ,not)/&+ p>agraphs 7#a7 & 7#b71 :5 comply+ ) ?is subsection1 a f9ancial in/itution1 f9ancial data aggregator1 or nonaffiliat$ ?ird p>ty %all comply ) any requirem5ts ( section #ajcc ( ! ,consum] ,f9ancial ,protection ,act ( #bjaj 7#ab ,u4,s4,c4 #eecc7 ) respect to ! use ( ! access cr$5tials ( a consum] to access an electronic =m ( ! consum]'s acc\nt at1 or o!rwise obta9 an electronic =m ( nonpublic p]sonal in=mation ( ! consum] f1 a f9ancial in/itution4 4 7b7 ,effective date ,?is section %all take effect #a ye> aft] ! date ( enactm5t ( ?is ,act4 #aje4 ,additional in=mation to be includ$ 9 notices to consum]s 7a7 ,9 g5]al ,section #ejc7;c7 ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjc7;c77 is am5d$-- 7#a7 9 p>agraph 7#c7 by /rik+ & at ! end2 7#b7 by r$esignat+ p>agraph 7#d7 z p>agraph 7#aa72 & 7#c7 by ins]t+ aft] p>agraph 7#c7 ! foll[+3 7#d7 ! categories ( purposes = :i* ! f9ancial in/itution-- 7,a7 collects nonpublic p]sonal in=mation2 & 7,b7 discloses nonpublic p]sonal in=mation to a nonaffiliat$ ?ird p>ty2 7#e7 ! categories ( practices ( ! f9ancial in/itution ) respect to ! f9ancial in/itution's ret5tion ( nonpublic p]sonal in=mation2 7#f7 ! categories ( practices ( ! f9ancial in/itution ) respect to ! f9ancial in/itution's use ( artificial intellig5ce 9 ! collection1 process+1 & utilization ( nonpublic p]sonal in=mation2 7#g7 :e!r any nonpublic p]sonal in=mation ( ! consum] is process$ 91 reta9$ 91 or disclos$ to a cov]$ nation2 7#h7 an explanation ( h[ a consum] c ex]cise ! option pursuant to section #ejb7;b7 to direct t nonpublic p]sonal in=mation n be disclos$ to a nonaffiliat$ ?ird p>ty be=e ! "t t su* in=mation is initially disclos$ & at any "t !reaft]2 7#i7 an explanation ( h[ a cu/om] c ex]cise ! option to reque/ a copy ( ! disclosure requir$ by subsection 7a7 pursuant to subsection 7g72 7#aj7 an explanation ( h[ a cu/om] or =m] cu/om] c ex]cise ! option to reque/ disclosure ( nonpublic p]sonal in=mation & h[ a =m] cu/om] c ex]cise ! option to reque/ deletion ( nonpublic p]sonal in=mation pursuant to section #ejc;,a2 & 4 7b7 ,update ( model =ms 7#a7 ,9 g5]al ,! ag5cies ref]r$ to 9 section #ejd7;a77#a7 ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjd7;a77#a77 %all1 9 consultation ) ! ,f$]al functional regulators1 jo9tly develop updates to ! model =m m&at$ by section #ejc7;e7 ( su* ,act4 7#b7 ,safe h>bor ,dur+ ! #b-ye> p]iod beg9n+ on ! date ! ag5cies f9alize updates to ! model =m "u p>agraph 7#a71 a f9ancial in/itution %all be deem$ to be compliant ) section #ejb7;a7 ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjb7;a77 if ! disclosures ( ! f9ancial in/itution "u section #ejc ( su* ,act comply ) ! model =m issu$ pursuant to section #ejc7;e7 9 effect on ! date ( enactm5t ( ?is ,act4 #ajf4 ,cu/om] access to privacy & disclosure policies ,section #ejc ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjc7 is am5d$ by ins]t+ at ! end ! foll[+3 7g7 ,cu/om] access to privacy & disclosure policies ,a f9ancial in/itution %all1 ^u a cu/om] reque/1 provide su* cu/om] ) a copy ( ! disclosure requir$ by subsection 7a7 9 writ+ or 9 electronic =m or o!r =m p]mitt$ by ! regulations prescrib$ "u section #ejd4 4 #ajg4 ,reque/s = disclosure ( or deletion ( nonpublic p]sonal in=mation 7a7 ,9 g5]al ,title ,v ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhja et seq47 is am5d$ by ins]t+ aft] section #ejc ! foll[+3 #ejc;,a4 ,reque/s = disclosure ( or deletion ( nonpublic p]sonal in=mation 7a7 ,cu/om] or =m] cu/om] reque/ = disclosure ( nonpublic p]sonal in=mation 7#a7 ,9 g5]al ,^u a reque/ f a cu/om] or =m] cu/om] ( a f9ancial in/itution1 su* f9ancial in/itution %all disclose to ! cu/om] or =m] cu/om]-- 7,a7 pursuant to ! requirem5ts ( section #ajcc ( ! ,consum] ,f9ancial ,protection ,act ( #bjaj 7#ab ,u4,s4,c4 #eecc71 any nonpublic p]sonal in=mation ( ! cu/om] or =m] cu/om] 9 ! control or possession ( ! f9ancial in/itution2 & 7,b7 a li/ ( ! categories ( affiliates & nonaffiliat$ ?ird p>ties to :om ! f9ancial in/itution has disclos$ nonpublic p]sonal in=mation ( ! cu/om] or =m] cu/om] 7o!r ?an disclosures ( nonpublic p]sonal in=mation made to an affiliate or a nonaffiliat$ ?ird p>ty pursuant to an exception "u section #ejb7;e774 7#b7 ,exception ,p>agraph 7#a7 %all n apply to ! ext5t t disclosure ( nonpublic p]sonal in=mation to a cu/om] or =m] cu/om] is prohibit$ "u o!r provisions ( law4 7b7 ,=m] cu/om] reque/ = deletion ( nonpublic p]sonal in=mation 7#a7 ,9 g5]al ,^u a reque/ f a =m] cu/om]1 a f9ancial in/itution %all delete any nonpublic p]sonal in=mation ( ! =m] cu/om] held by ! f9ancial in/itution4 7#b7 ,=m] cu/om] deletion reque/ exceptions ,p>agraph 7#a7 %all n require deletion ( nonpublic p]sonal in=mation ( a =m] cu/om] by a f9ancial in/itution :]e-- 7,a7 ! nonpublic p]sonal in=mation is requir$ to be reta9$ = a cont9u+ purpose pursuant to an exception describ$ "u section #ejb7;e72 7,b7 ! hold] ( ! nonpublic p]sonal in=mation is a consum] report+ ag5cy1 z def9$ 9 section #fjc7;f7 ( ! ,fair ,cr$it ,report+ ,act 7#ae ,u4,s4,c4 #afha;a7f771 & ! nonpublic p]sonal in=mation is held solely to ! ext5t t x is us$ 9 activities subject to ! ,fair ,cr$it ,report+ ,act2 7,c7 ! nonpublic p]sonal in=mation is requir$ to be reta9$ to respond to a dispute "u ! ,fair ,cr$it ,report+ ,act2 or 7,d7 ! nonpublic p]sonal in=mation is requir$ to be reta9$ z o!rwise requir$ by law4 7#c7 ,v]ification 7,a7 ,9 g5]al ,a f9ancial in/itution %all e/abli% & implem5t proc$ures to v]ify ! id5tity ( a =m] cu/om] submitt+ a reque/ "u p>agraph 7#a7 be=e delet+ nonpublic p]sonal in=mation t is ! subject ( su* reque/4 7,b7 ,requirem5ts ,! proc$ures e/abli%$ by a f9ancial in/itution pursuant to subp>agraph 7,a7 %all be design$ to-- 7i7 confirm t ! individual mak+ ! reque/ is ! =m] cu/om] to :om ! nonpublic p]sonal in=mation relates2 7ii7 protect aga9/ unau?oriz$ deletion ( nonpublic p]sonal in=mation result+ f fraudul5t reque/s2 & 7iii7 protect aga9/ deletion ( nonpublic p]sonal in=mation result+ f reque/s made by a =m] cu/om] 9 error4 7,c7 ,exception ,a f9ancial in/itution %all n be requir$ to grant a reque/ "u p>agraph 7#a7 if ! f9ancial in/itution _c confirm t ! id5tity ( ! individual mak+ su* reque/ is ! same z ! =m] cu/om] to :om ! nonpublic p]sonal in=mation relates4 7#d7 ,response p]iod 7,a7 ,9 g5]al ,a f9ancial in/itution %all respond to a =m] cu/om] submitt+ a reque/ "u p>agraph 7#a7 )\t undue delay1 b 9 all cases )9 #de days ( receiv+ su* reque/4 7,b7 ,ext5sion ,a f9ancial in/itution may ext5d ! response p]iod 9 subp>agraph 7,a7 once = an additional #de days :5 necess>y1 tak+ into acc\nt ! complexity & numb] ( reque/s by ! =m] cu/om]1 b mu/ in=m ! =m] cu/om] ( su* ext5sion & ! reason = su* ext5sion )9 ! initial #de day response p]iod "u subp>agraph 7,a74 7#e7 ,apportionm5t ( co/s 7,a7 ,initial reque/s ,a =m] cu/om] may submit #b reque/s p] ye> free ( *>ge to a f9ancial in/itution "u p>agraph 7#a74 7,b7 ,subsequ5t reque/s ,= any reque/ ( a =m] cu/om] "u p>agraph 7#a7 subsequ5t to ! reque/s describ$ 9 subp>agraph 7,a71 a f9ancial in/itution may-- 7i7 *>ge ! =m] cu/om] a fee1 if ! f9ancial in/itution has notifi$ ! =m] cu/om] ( su* fee & ! =m] cu/om] has cons5t$ to su* fee2 or 7ii7 decl9e to act on su* reque/1 if ! =m] cu/om] does n cons5t to ! fee describ$ "u clause 7i74 7#f7 ,appeal ,subject to ! exceptions 9 p>agraph 7#b71 a f9ancial in/itution receiv+ a reque/ "u p>agraph 7#a7 %all-- 7,a7 e/abli% a process = a =m] cu/om] to appeal a det]m9ation by a f9ancial in/itution to d5y a reque/ "u p>agraph 7#a72 7,b7 make su* appeal process "u subp>agraph 7,a7 cle>ly & conspicu\sly disclos$ to ! =m] cu/om] 9 ! response requir$ "u p>agraph 7#d7 if ! reque/ "u p>agraph 7#a7 is to be d5i$ by ! f9ancial in/itution2 7,c7 respond to su* an appeal reque/ by ! =m] cu/om]-- 7i7 n lat] ?an #fj days aft] ! date on :i* su* appeal reque/ is receiv$2 & 7ii7 by in=m+ ! =m] cu/om] 9 writ+ or 9 electronic =m or o!r =m p]mitt$ by ! regulations prescrib$ "u section #ejd ( any action tak5 9 response to ! appeal1 includ+ an explanation ( ! reason = ea* action tak52 & 7,d7 if su* an appeal is d5i$1 provide ! =m] cu/om] ) an onl9e me*anism1 if available1 or o!r me?od ?r\gh :i* ! =m] cu/om] may contact ! appropriate en=cem5t ag5cy or au?ority z describ$ 9 section #eje to submit a compla9t4 4 7b7 ,effective date ,?is section %all take effect #b ye>s aft] ! date ( enactm5t ( ?is ,act4 7c7 ,cl]ical am5dm5t ,! table ( cont5ts 9 section #a7;b7 ( ! ,gramm-,lea*-,bliley ,act is am5d$ by ins]t+ aft] ! item relat+ to section #ejc ! foll[+3 ,sec4 #ejc;,a4 ,reque/s = disclosure ( or deletion ( nonpublic p]sonal in=mation4 4 #ajh4 ,opt 9 = s5sitive nonpublic p]sonal in=mation 7a7 ,9 g5]al ,section #ejb ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjb71 z am5d$ by sections #ajb7c7 & #ajd1 is fur!r am5d$ by add+ at ! end ! foll[+3 7h7 ,opt 9 = s5sitive nonpublic p]sonal in=mation 7#a7 ,9 g5]al ,not)/&+ subsection 7b77#a71 a f9ancial in/itution may n collect s5sitive nonpublic p]sonal in=mation or disclose s5sitive nonpublic p]sonal in=mation to a nonaffiliat$ ?ird p>ty unless-- 7,a7 su* f9ancial in/itution cle>ly & conspicu\sly discloses to ! consum]1 9 writ+ or 9 electronic =m or o!r =m p]mitt$ by ! regulations prescrib$ "u section #ejd1 t su* in=mation may be collect$ or t su* in=mation may be disclos$ to su* ?ird p>ty2 7,b7 su* f9ancial in/itution obta9s ! cons5t ( ! consum] to collect su* in=mation or to disclose su* in=mation to su* ?ird p>ty be=e ! "t t su* in=mation is initially collect$ or disclos$2 & 7,c7 ! consum] is giv5 an explanation ( h[ ! consum] c revoke t cons5t pursuant to p>agraph 7#b74 7#b7 ,cont9u+ consum] cons5t revocation "r ,a consum] may revoke _! cons5t "u p>agraph 7#a77;,b7 at any "t4 7#c7 ,rule ( con/ruction ,p>agraph 7#a7 %all n be con/ru$ to prev5t a f9ancial in/itution f disclos+ s5sitive nonpublic p]sonal in=mation-- 7,a7 pursuant to section #ejb7;e77#c77;,a72 7,b7 pursuant to section #ejb7;e77#c77;,b72 7,c7 pursuant to section #ejb7;e77#e72 or 7,d7 pursuant to section #ejb7;e77#h74 4 7b7 ,effective date ,?is section %all take effect #a ye> aft] ! date ( enactm5t ( ?is ,act4 ,,ii ,regulatory ,consid]ation = ,small ,f9ancial ,in/itutions #bja4 ,regulatory consid]ation = small f9ancial in/itutions ,section #ejd ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjd7 is am5d$ by add+ at ! end ! foll[+3 7c7 ,consid]ation ( effects on f9ancial in/itutions ) #ae1jjj1jjj1jjj or less 9 assets 7#a7 ,9 g5]al ,ea* ( ! ag5cies au?oriz$ "u subsection 7a77#a7 to prescribe regulations %all take into acc\nt ! effects ( ! regulations on f9ancial in/itutions ) #ae1jjj1jjj1jjj or less 9 assets1 includ+ ! res\rce1 te*nical1 & p]sonnel limitations ( su* f9ancial in/itutions to comply ) ! regulations & ! regulatory compliance co/s relative to ! size1 complexity1 f9ancial activities1 rev5ues1 & noncompliance co/s ( su* f9ancial in/itutions4 7#b7 ,?re%old adju/m5t ,by ,april #a1 #bjca1 & ! #a/ day ( ea* subsequ5t #e-ye> p]iod1 ! ag5cies au?oriz$ "u subsection 7a77#a7 to prescribe regulations %all increase ! ?re%old describ$ 9 p>agraph 7#a7 by ! ratio1 if great] ?an #a1 ( ! annual value ( curr5t-doll> ,unit$ ,/ates gross dome/ic product1 publi%$ by ! ,dep>tm5t ( ,comm]ce1 = ! cal5d> ye> prec$+ ! ye> 9 :i* ! adju/m5t is calculat$ "u ?is section1 to ! publi%$ annual value ( su* index = ! cal5d> ye> prec$+ ,april #a1 #bjbf4 4 ,,iii ,relation to ,o!r ,laws #cja4 ,relation to ,/ate laws ,section #ejg ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhjg7 is am5d$ to read z foll[s3 #ejg4 ,relation to ,/ate laws 7a7 ,9 g5]al ,?is subtitle & ! am5dm5ts made by ?is subtitle %all sup]s$e & preempt ! application ( any ,/ate /atute1 regulation1 ord]1 int]pretation1 or o!r law t e/abli%es consum] data privacy or security requirem5ts to nonpublic p]sonal in=mation subject to ?is subtitle4 ,?is subtitle & ! am5dm5ts made by ?is subtitle %all sup]s$e & preempt ! application ( any ,/ate /atute1 regulation1 ord]1 int]pretation1 or o!r law t e/abli%es consum] data privacy or security requirem5ts to a f9ancial in/itution subject to ?is subtitle4 7b7 ,regulation & en=cem5t by ,/ate insurance au?orities ,subsection 7a7 %all n be con/ru$ to alt]1 affect1 or o!rwise limit ! au?ority ( a ,/ate insurance au?ority to en=ce ?is subtitle pursuant to section #eje or to adopt regulations to c>ry out ?is subtitle pursuant to section #ejd 9 a mann] consi/5t & comp>able )1 & n m re/rictive ?an1 ! regulations prescrib$ by ! ,f$]al ag5cies au?oriz$ to prescribe regulations "u section #ejd z requir$ by section #ejd7;a77#b74 4 ,,iv ,additions to ,def9itions #dja4 ,additions to def9itions ,section #eji ( ! ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhji7 is am5d$-- 7#a7 9 p>agraph 7#c77;,a71 by ins]t+ be=e ! p]iod at ! end ! foll[+3 or a f9ancial data aggregator2 7#b7 by am5d+ p>agraph 7#d77;,a7 to read z foll[s3 7,a7 ,! t]m nonpublic p]sonal in=mation means-- 7i7 p]sonally id5tifiable f9ancial in=mation-- 7,i7 provid$ by a consum] to a f9ancial in/itution2 7,,ii7 result+ f any transaction ) ! consum] or any s]vice p]=m$ = ! consum]2 or 7,,iii7 o!rwise obta9$ by ! f9ancial in/itution2 7ii7 access cr$5tials2 & 7iii7 :5 us$ by a f9ancial in/itution :ile engag+ 9 f9ancial activities z describ$ 9 section #d7k7 ( ! ,bank ,hold+ ,company ,act ( #aief 7#ab ,u4,s4,c4 #ahdc7k77-- 7,i7 biometric data2 & 7,,ii7 precise geolocation data4 2 7#c7 9 p>agraph 7#aa71 by /rik+ ,cu/om] & ins]t+ ,"t ( e/abli%+ a cu/om]2 & 7#d7 by add+ at ! end ! foll[+3 7#ab7 ,access cr$5tials ,! t]m access cr$5tials means p]sonally id5tifiable nonf9ancial in=mation t a consum] uses to access an acc\nt ( su* consum] at a f9ancial in/itution1 includ+ a us]name1 password1 p]sonal id5tification numb]1 access code1 answ] to a security "q1 or a sub/antially simil> item ( p]sonally id5tifiable nonf9ancial in=mation4 7#ac7 ,artificial intellig5ce ,! t]m artificial intellig5ce has ! mean+ giv5 su* t]m 9 section #ejjb ( ! ,national ,artificial ,intellig5ce ,initiative ,act ( #bjbj 7#ae ,u4,s4,c4 #idja74 7#ad7 ,biometric data ,! t]m biometric data-- 7,a7 means p]sonally id5tifiable nonf9ancial in=mation ( a consum] g5]at$ by automatic measurem5ts ( biological *>act]i/ics1 includ+ a f+]pr9t1 voicepr9t1 eye ret9as1 eye irises1 or o!r unique biological patt]ns or *>act]i/ics t are us$ to id5tify a specific consum]2 & 7,b7 does n include a physical or digital photograph1 a video or audio record+ or data g5]at$ !refrom1 or in=mation collect$1 us$1 or /or$ = heal? c>e treatm5t1 paym5t1 or op]ations "u ! ,heal? ,insurance ,portability & ,acc\ntability ,act or ! am5dm5ts made by t ,act4 7#ae7 ,cons5t ,! t]m cons5t means a cle> affirmative act by a consum] t-- 7,a7 signifies ! freely giv51 specific1 in=m$1 & unambigu\s agreem5t by ! consum] to an action2 & 7,b7 is-- 7i7 9 writ+ or 9 electronic =m or o!r =m p]mitt$ by ! regulations prescrib$ "u section #ejd2 or 7ii7 9 any o!r unambigu\s affirmative =m4 7#af7 ,cov]$ nation ,! t]m cov]$ nation has ! mean+ giv5 su* t]m 9 section #dhgb7;f7 ( title #aj1 ,unit$ ,/ates ,code4 7#ag7 ,cu/om] ,! t]m cu/om] means a consum] :o has a cu/om] relation%ip ) a f9ancial in/itution4 7#ah7 ,cu/om] relation%ip ,! t]m cu/om] relation%ip means a cont9u+ relation%ip betwe5 a consum] & a f9ancial in/itution "u :i* ! f9ancial in/itution provides "o or m f9ancial products or s]vices to ! consum] t are to be us$ prim>ily = p]sonal1 family1 or h\sehold purposes4 7#ai7 ,f9ancial data aggregator ,! t]m f9ancial data aggregator-- 7,a7 means any p]son t op]ates a comm]cial ent]prise = ! prim>y bus9ess purpose ( access+1 aggregat+1 collect+1 process+1 sell+1 or o!rwise disclos+ nonpublic p]sonal in=mation2 & 7,b7 does n include-- 7i7 a p]son t receives1 processes1 or discloses nonpublic p]sonal in=mation solely to ! ext5t t x p]=ms s]vices = or functions on behalf ( a f9ancial in/itution pursuant to section #ejb7;b77#b7 or pursuant to an exception describ$ "u section #ejb7;e72 7ii7 a consum] report+ ag5cy1 z def9$ 9 section #fjc7;f7 ( ! ,fair ,cr$it ,report+ ,act 7#ae ,u4,s4,c4 #afha;a7f771 solely to ! ext5t t x engages 9 activities subject to ! ,fair ,cr$it ,report+ ,act2 7iii7 an attorney1 acc\ntant1 inve/m5t advis]1 or o!r p]son act+ 9 a fiduci>y or repres5tative capacity on behalf ( a consum] pursuant to section #ejb7;e77#c77;,e72 7iv7 a p]son-- 7,i7 to ! ext5t t su* p]son is n a f9ancial in/itution2 & 7,,ii7 t op]ates a comm]cial ent]prise t receives1 processes1 or discloses nonpublic p]sonal in=mation = ! purpose ( mak+ or receiv+ paym5ts associat$ ) a sale1 pur*ase1 or ex*ange ( goods or s]vices2 or 7v7 a self-regulatory organization t receives or processes nonpublic p]sonal in=mation disclos$ to x by its memb]s1 or t discloses nonpublic p]sonal in=mation to an ag5cy4 7#bj7 ,=m] cu/om] ,! t]m =m] cu/om] means a consum] :o has previ\sly _h a cu/om] relation%ip ) a f9ancial in/itution & t is no long] a cu/om] ( ! f9ancial in/itution because t cu/om] relation%ip has t]m9at$4 7#ba7 ,precise geolocation data ,! t]m precise geolocation data-- 7,a7 means p]sonally id5tifiable nonf9ancial in=mation ( a consum] g5]at$ by te*nological means1 includ+ global position+ sy/ems1 telemetry1 telematics1 & level1 latitude1 & longitude coord9ates1 or o!r means1 t directly id5tifies ! specific location ( a consum] ) precision & accuracy )9 a radius ( #a1gej feet2 & 7,b7 does n include ! cont5t ( communications or any data g5]at$ by or connect$ to advanc$ utility met]+ infra/ructure sy/ems or equipm5t = use by a utility4 7#bb7 ,self-regulatory organization ,! t]m self-regulatory organization-- 7,a7 has ! mean+ giv5 t t]m 9 section #c7;a7 ( ! ,securities ,ex*ange ,act ( #aicd 7#ae ,u4,s4,c4 #gh;c7a772 & 7,b7 means-- 7i7 a contract m>ket1 d]ivatives transaction execution facility1 regi/]$ futures association1 or o!r self-regulatory organization regi/]$ ) ! ,commodity ,futures ,trad+ ,commission2 & 7ii7 any o!r self-regulatory organization regi/]$ ) an ag5cy au?oriz$ "u section #ejd7;a77#a7 to prescribe regulations or ) a ,f$]al functional regulator1 z det]m9$ by su* ag5cy or su* ,f$]al functional regulator4 7#bc7 ,s5sitive nonpublic p]sonal in=mation ,! t]m s5sitive nonpublic p]sonal in=mation means1 :5 us$ by a f9ancial in/itution :ile engag+ 9 f9ancial activities z describ$ 9 section #d7k7 ( ! ,bank ,hold+ ,company ,act ( #aief 7#ab ,u4,s4,c4 #ahdc7k77-- 7,a7 p]sonally id5tifiable nonf9ancial in=mation ( a consum] t discloses ! consum]'s racial or e?nic orig91 religi\s belief1 m5tal or physical heal? diagnosis1 sexual ori5tation1 or citiz5%ip or immigration /atus2 7,b7 g5etic or biometric data ( a consum] t is disclos$ = ! purpose ( uniquely id5tify+ a specific consum]2 & 7,c7 precise geolocation data4 7#bd7 ,/ate ,! t]m ,/ate means ea* ,/ate ( ! ,unit$ ,/ates1 ! ,di/rict ( ,columbia1 ea* commonweal?1 t]ritory1 or possession ( ! ,unit$ ,/ates1 & ea* f$]ally recogniz$ ,indian ,tribe4 4