Idaho Administrative Code
Title IDAPA 18 - Insurance, Department of
Rule 18.01.01 - RULE TO IMPLEMENT THE PRIVACY OF CONSUMER FINANCIAL INFORMATION
Section 18.01.01.202 - SATISFYING THE PRIVACY NOTICE INFORMATION REQUIREMENTS
Current through August 31, 2023
01. Categories of Nonpublic Personal Financial Information That the Licensee Collects. A licensee satisfies the requirement to categorize the nonpublic personal financial information it collects if the licensee categorizes it according to the source of the information, as applicable: (3-31-22)
02. Categories of Nonpublic Personal Financial Information a Licensee Discloses. (3-31-22)
03. Categories of Affiliates and Nonaffiliated Third Parties to Whom the Licensee Discloses. A licensee satisfies the requirement to categorize the third parties to which the licensee discloses nonpublic personal financial information about consumers if the licensee identifies the types of businesses in which they engage. Types of businesses may be described by general terms only if the licensee uses a few illustrative examples of significant lines of business. (3-31-22)
04. Disclosures Under Exception for Service Providers and Joint Marketers. If a licensee discloses nonpublic personal financial information under the exception in Section 450 to a nonaffiliated third party to market products or services it offers alone or jointly with another financial institution, the licensee satisfies the disclosure requirement of Subsection 200.04 of this rule if it: (3-31-22)
05. Simplified Notices. If a licensee does not disclose and does not wish to reserve the right to disclose nonpublic personal financial information about customers or former customers to third parties except as authorized under Sections 451 and 452, the licensee may simply state that fact, in addition to the information it provides under Subsections 200.01, 200.07, and Section 201 of this rule. (3-31-22)
06. Confidentiality and Security. A licensee describes its policies and practices with respect to protecting the confidentiality and security of nonpublic personal financial information if it does both of the following: (3-31-22)