<html> <head> <meta name=Generator content="Microsoft Office HTML Filter 2.0"> <meta http-equiv=Content-Type content="text/html; charset=windows-1252"> <meta name=Originator content="Microsoft Word 10"> <title>Rule 20:06:45 PRIVACY OF CONSUMER FINANCIAL AND HEALTH INFORMATION</title> <META NAME="Keywords" Content="Administrative Rules 20:06:45"> <META NAME="Description" Content="Administrative Rules 20:06:45 PRIVACY OF CONSUMER FINANCIAL AND HEALTH INFORMATION"> <style> <!-- --> </style> </head> <body lang=EN-US> <div> <p align=center><b>CHAPTER 20:06:45</b></p> <p align=center><b>&nbsp;</b></p> <p align=center><b>PRIVACY OF CONSUMER FINANCIAL AND HEALTH INFORMATION</b></p> <p>Section</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:01">20:06:45:01</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Purpose and scope.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:02">20:06:45:02</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Rule of construction.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:03">20:06:45:03</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Definitions.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:04">20:06:45:04</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Initial privacy notice to consumers required.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:05">20:06:45:05</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Annual privacy notice to customers required.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:06">20:06:45:06</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Information to be included in privacy notices.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:07">20:06:45:07</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Form of opt out notice to consumers and opt out methods.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:08">20:06:45:08</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Revised privacy notices.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:09">20:06:45:09</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Delivery.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:10">20:06:45:10</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Limits on disclosure of nonpublic personal financial information to nonaffiliated third parties.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:11">20:06:45:11</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Limits on redisclosure and reuse of nonpublic personal financial information.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:12">20:06:45:12</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Limits on sharing account number information for marketing purposes.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:13">20:06:45:13</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Exception to opt out requirements for disclosure of nonpublic personal financial information for service providers and joint marketing.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:14">20:06:45:14</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information for processing and servicing transactions.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:15">20:06:45:15</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Other exceptions to notice and opt out requirements for disclosure of nonpublic personal financial information.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:16">20:06:45:16</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Protection of Fair Credit Reporting Act.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:17">20:06:45:17</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Nondiscrimination.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:18">20:06:45:18</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Effective date.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:19">20:06:45:19</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Obligation to provide information to director.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:20">20:06:45:20</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Information security program.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:21">20:06:45:21</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Objectives of information security program.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:22">20:06:45:22</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Examples of methods of development and implementation.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:23">20:06:45:23</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Assess risk.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:24">20:06:45:24</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Manage and control risk.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:25">20:06:45:25</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Oversee service provider arrangements.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:26">20:06:45:26</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Adjust the program.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:27">20:06:45:27</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Disclosure of nonpublic personal health information.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:28">20:06:45:28</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Authorization to disclose nonpublic personal health information.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:29">20:06:45:29</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Authorization delivery.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:30">20:06:45:30</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Relationship to federal rules.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:31">20:06:45:31</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Relationship to state laws.</p> <p><a href="DisplayRule.aspx?Rule=20:06:45:0A">Appendix A</a>&nbsp;&nbsp; Sample clauses.</p> </div> </body> </html>