New Mexico Administrative Code
Title 13 - INSURANCE
Chapter 1 - INSURANCE GENERAL PROVISIONS
Part 3 - PRIVACY OF NONPUBLIC PERSONAL INFORMATION
Section 13.1.3.9 - ANNUAL PRIVACY NOTICE TO CUSTOMERS REQUIRED FOR NONPUBLIC PERSONAL FINANCIAL INFORMATION
Current through Register Vol. 35, No. 18, September 24, 2024
A. General rule. A licensee shall provide a clear and conspicuous notice to customers that accurately reflects its privacy policies and practices not less than annually during the continuation of the customer relationship. Annually means at least once in any period of 12 consecutive months during which that relationship exists. A licensee may define the 12 consecutive-month period, but the licensee shall apply it to the customer on a consistent basis. Example: A licensee provides a notice annually if it defines the 12 consecutive-month period as a calendar year and provides the annual notice to the customer once in each calendar year following the calendar year in which the licensee provided the initial notice. For example, if a customer opens an account on any day of year one the licensee shall provide an annual notice to that customer by December 31 of year two.
B. Exception to the general rule. A licensee that provides nonpublic personal information in accordance with Sections 13.1.3.17 NMAC, 13.1.3.18 NMAC, and 13.1.3.19 NMAC and has not changed its policies and practices with regard to disclosing nonpublic personal information from the policies and practices that were disclosed in the most recent notice sent to consumers in accordance with 13.1.3.8 NMAC shall not be required to provide a subsequent annual notice under this section until such time as the licensee fails to comply with any criteria described in this subsection. Notice of a change in a licensee's privacy policy shall be sent 90 days after the effective date of the change.
C. Termination of customer relationship. A licensee is not required to provide a privacy notice to a former customer. A former customer is an individual with whom a licensee no longer has a continuing relationship. Examples:
D. Delivery. When a licensee is required by this section to deliver a privacy notice, the licensee shall deliver it according to 13.1.3.13 NMAC.