3 Colo. Code Regs. § 702-6-4-1-3

Current through Register Vol. 47, No. 20, October 25, 2024
Section 3 CCR 702-6-4-1-3 - Applicability
A. This regulation applies to:
1. Nonpublic personal financial information about individuals who obtain or are claimants or beneficiaries of products or services primarily for personal, family or household purposes from licensees. This regulation does not apply to information about companies or about individuals who obtain products or services for business, commercial or agricultural purposes; and
2. All nonpublic personal health information.
B. A licensee domiciled in Colorado that is in compliance with this regulation in a state that has not enacted laws or regulations that meet the requirements of Title V of the Gramm-Leach-Bliley Act (PL 102-106) may nonetheless be deemed to be in compliance with Title V of the Gramm-Leach-Bliley Act in the other state.
C. Rules of Construction.

The examples in this regulation, the sample clauses in Appendix A, and the Federal Model Privacy Form in Appendix B of this regulation are not exclusive. Compliance with an example or use of a sample clause, or the Federal Privacy Model Form, to the extent applicable, constitutes compliance with this regulation. Licensees may rely on use of the Federal Model Privacy Form in Appendix B, consistent with the attached instructions, as a safe harbor of compliance with the privacy notice content requirements of this regulation. Use of the Federal Model Privacy Form is not required. Licensees may continue to use other types of privacy notices, including notices that contain the examples in this regulation and/or the sample clauses in Appendix A, provided that such notices accurately describe the licensee's privacy practices and otherwise meet the notice content requirements of this regulation. However, while licensees may continue to use privacy notices that contain the examples in this regulation and/or the sample clauses in Appendix A, licensees may not rely on use of privacy notices with the sample clauses in Appendix A as a safe harbor of compliance with the notice content requirements of this regulation after July 1, 2019.

3 CCR 702-6-4-1-3

38 CR 18, September 25, 2015, effective 10/15/2015
39 CR 01, January 10, 2016, effective 2/1/2016
40 CR 24, December 25, 2017, effective 1/14/2018
41 CR 08, April 25, 2018, effective 6/1/2018