Section R765-649-3 - General3.1 UHEAA collects nonpublic personal information about customers from: 3.1.1 information received from customers on applications or other forms;3.1.2 information from customer transactions with UHEAA, its affiliates or others; and3.1.3 information received from a consumer reporting agency.3.2 UHEAA does not disclose any nonpublic personal information about our customers or former customers to anyone, except as permitted by law.3.3 UHEAA restricts access to nonpublic personal information about customers to those employees who need to know such information to provide products or services to customers. UHEAA maintains physical, electronic, and procedural safeguards that comply with federal regulations to guard customer nonpublic personal information.Utah Admin. Code R765-649-3