**GAO-02-361**                      Published: Apr 12, 2002. Publicly Released: May 16, 2002.                  

-   
-   
-   
-   

    Jump To:  
-  Elder Abuse 
-  Services for Older Adults 
-  State and Local-Level Drivers and Trends 
-  State and Local Fiscal Projections 
-  Federal Borrowing 
-  Managing the Debt 
-  Summary of Funding Provisions 
-  Auditing the Government's Books 
-  Unpacking the Financial Report 
-  Highlights 
-  Recommendations 
-  Background 
-  About This Work 
-  About This Work 
-  Trends 
-  About the Center 
-  Why It's High Risk 
-  What Remains To Be Done 
-  Key Reports 
-  Newest COVID-Related Reports 
-  AI Use Cases 
-  Flood Insurance 
-  Past Pandemic-Related Reports 
-  CARES Act Oversight Reports 
-  All COVID-19 Reports 
-  Report Suspected Fraud 
-  Subjects 
-  How to Get Notified 
-  Past Reports 
-  Public Health Threats 
-  Explore the FY 2022 and 2023 Funds 
-  Status of FY22 Projects 
-  Lessons Learned 
-  Agency Reports 
-  Recent Reports 
-  Recommendations 
-  Supplemental Material 
-  Full Report 
-  Additional Data 
-  View Decision 
-  Downloads 
-  Previously Identified Actions 
-  Related Pages 
-  Associated Agencies 
-  Tough Choices and Opportunities Ahead 
-  Americas Fiscal Future Key Areas 
-  Retirement Security Key Areas 
-  Current List 
-  About The High Risk List 
-  Area Ratings 
-  Previous High Risk Products 
-  Search Federal Vacancies 
-  Past Federal Vacancies 
-  Violation Letters 
-  About the Yellow Book 
-  Advisory Council 
-  Related Resources 
-  Comment Letters 
-  Related Publications 
-  Contacts and Resources 
-  Major Issues Facing the Nation 
-  Meeting Strategic Challenges 
-  Additional Resources 
-  Resources 
-  GAO Contacts 
-  Mission Teams 
-  Operations and Staff Offices  
-  Organization Chart  
-  Why a Career at GAO? 
-  Am I Qualified? 
-  Company Culture 
-  Reasonable Accommodations 
-  Video Gallery 
-  Paid Internships 
-  Student Volunteers 
-  Professional Development Program 
-  Advancement 
-  Executive Candidate Program 
-  Summer Associates 
-  Externships 
-  Benefits 
-  Contacts 

Skip to Highlights

## Highlights

Subtitle A of Title V of the Gramm-Leach-Bliley Act (GLBA) of 1999 requires that each financial institution, which is defined to include most insurance providers or companies, has "an affirmative and continuing obligation to respect the privacy of its customers and to protect the security and confidentiality of those customers' nonpublic personal information." This prohibits the disclosure of consumers' nonpublic personal information to any entity that is not an affiliate of, or related by common ownership or control, to the institution unless the consumer is given an opportunity to opt out of such disclosure. Also, financial institutions must provide consumers with privacy notices that explain the institution's policies and practices for disclosure. Subtitle A calls upon federal regulators to (1) issue regulations implementing disclosure-related requirements and (2) establish standards for safeguarding the privacy and integrity of customer information and records. The act also requires state insurance authorities to enforce its provisions by adopting regulations for both information disclosure and information safeguards. As of March 2002, all of the states and the District of Columbia have acted to ensure that insurance companies under their jurisdiction meet Subtitle A's disclosure and notice requirements. In addition, some states have included or retained provisions in their regulations or laws that they believe provide greater protections or more restrictive requirements than those contained in Subtitle A. Only New York has established standards for protecting the security and confidentiality of insurance customer information as of March 2002. Another state, California, has issued proposed regulations establishing such standards. In contrast, as of March 2002, the federal regulators charged with implementing Subtitle A--with the exception of the Federal Trade Commission--have issued their final standards. FTC has received comments on proposed standards and is developing its final rule.

## Full Report

Full Report (22 pages)

Accessible Text 

## Office of Public Affairs

### Media Inquiries

Sarah Kaczmarek
kaczmareks@gao.gov

(202) 512-4800

### Public Inquiries

Public Affairs
PublicAffairs@gao.gov

(202) 512-4800

## Topics

Auditing and Financial Management

Disclosure lawstate relationsFinancial institutionsInformation disclosureInsurance companiesInsurance regulationLaw enforcementPrivacy lawRight of privacyInformation security regulations