Chapter 20:06:45 - Privacy of consumer financial and health information
- Section 20:06:45:01 - Purpose and scope
- Section 20:06:45:02 - Rule of construction
- Section 20:06:45:03 - Definitions
- Section 20:06:45:04 - Initial privacy notice to consumers required
- Section 20:06:45:05 - Annual privacy notice to customers required
- Section 20:06:45:06 - Information to be included in privacy notices
- Section 20:06:45:07 - Form of opt out notice to consumers and opt out methods
- Section 20:06:45:08 - Revised privacy notices
- Section 20:06:45:09 - Delivery
- Section 20:06:45:10 - Limits on disclosure of nonpublic personal financial information to nonaffiliated third parties
- Section 20:06:45:11 - Limits on redisclosure and reuse of nonpublic personal financial information
- Section 20:06:45:12 - Limits on sharing account number information for marketing purposes
- Section 20:06:45:13 - Exception to opt out requirements for disclosure of nonpublic personal financial information for service providers and joint marketing
- Section 20:06:45:14 - Exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information for processing and servicing transactions
- Section 20:06:45:15 - Other exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information
- Section 20:06:45:16 - Protection of Fair Credit Reporting Act
- Section 20:06:45:17 - Nondiscrimination
- Section 20:06:45:18 - Effective date
- Section 20:06:45:19 - Obligation to provide information to director
- Section 20:06:45:20 - Information security program
- Section 20:06:45:21 - Objectives of information security program
- Section 20:06:45:22 - Examples of methods of development and implementation
- Section 20:06:45:23 - Assess risk
- Section 20:06:45:24 - Manage and control risk
- Section 20:06:45:25 - Oversee service provider arrangements
- Section 20:06:45:26 - Adjust the program
- Section 20:06:45:27 - Disclosure of nonpublic personal health information
- Section 20:06:45:28 - Authorization to disclose nonpublic personal health information
- Section 20:06:45:29 - Authorization delivery
- Section 20:06:45:30 - Relationship to federal rules
- Section 20:06:45:31 - Relationship to state laws
- Appendix A - Sample clauses