Emphasizes that this Act neither modifies, limits, nor supersedes standards established under the Health Insurance Portability and Accountability Act of 1996 with respect to the privacy and security of individually identifiable health information.
Sets forth limits upon redisclosure and reuse of nonpublic consumer personal information received by an affiliated or nonaffiliated third party from a financial institution.
Prescribes guidelines for: (1) consumer rights to access and correct information; and (2) Federal and State enforcement powers under this Act.
Revises requirements for the timing of a financial institution's disclosure to consumers of its privacy policies and practices, including a new requirement that the disclosure first occur before a customer relationship is established (currently, when it is established).
Prohibits a financial institution from disclosing to either an affiliate or nonaffiliated third party its customer's account number or comparable access number or code.
Permits financial institution disclosure of nonpublic personal information: (1) in connection with performing services or functions solely on such institution's behalf regarding its own customers, including marketing of the institution's own products or services to its customers; and (2) in order to facilitate certain customer services.
Directs specified Federal agencies, including the Federal Trade Commission, to prescribe implementing regulations.