(a) This Article shall not apply to information that is not personally identifiable to a particular person.
(1) The confidential consumer information is necessary to effect, administer, or enforce a transaction requested or authorized by the consumer, or in connection with servicing or processing a financial product or service requested or authorized by the consumer, or in connection with maintaining or servicing the consumer's account with the financial institution, or with another entity as part of a private label credit card program, or other extension of credit on behalf of such entity, or in connection with a proposed or actual securitization or secondary market sale, including sales of servicing rights, related to a transaction of the consumer.
(2) The confidential consumer information is released with the consent of or at the direction of the consumer.
(3) The confidential consumer information is:
(A) Released to protect the confidentiality or security of the financial institution's records pertaining to the consumer, the service or product, or the transaction therein.
(B) Released to protect against or prevent actual or potential fraud, identity theft, unauthorized transactions, claims, or other liability.
(C) Released for required institutional risk control, or for resolving customer disputes or inquiries.
(D) Released to persons holding a legal or beneficial interest relating to the consumer.
(E) Released to persons acting in a fiduciary or representative capacity on behalf of the consumer.
(4) The confidential consumer information is released to provide information to insurance rate advisory organizations, guaranty funds or agencies, applicable rating agencies of the financial institution, persons assessing the institution's compliance with industry standards, and the institution's attorneys, accountants, and auditors.
(5) The confidential consumer information is released to the extent specifically required or specifically permitted under other provisions of law and in accordance with the Right to Financial Privacy Act of 1978 (12 U.S.C. Sec. 3401 et seq.), to law enforcement agencies, including a federal functional regulator, the Secretary of the Treasury with respect to subchapter II of Chapter 53 of Title 31, and Chapter 2 of Title I of Public Law 91-508 (12 U.S.C. Secs. 1951 – 1959), the California Department of Insurance, or the Federal Trade Commission, and self-regulatory organizations.
(6) The confidential consumer information is released (A) to a consumer reporting agency in accordance with the Fair Credit Reporting Act (15 U.S.C. Sec. 1681 et seq.); or (B) from a consumer report reported by a consumer reporting agency.
(7) The confidential consumer information is released in connection with a proposed or actual sale, merger, transfer, or exchange of all or a portion of a business or operating unit if the disclosure of confidential consumer information concerns solely consumers of the business or unit.
(8) The confidential consumer information is released to comply with federal, state, or local laws, rules, and other applicable legal requirements; to comply with a properly authorized civil, criminal, or regulatory investigation or subpoena or summons by federal, state, or local authorities; or to respond to judicial process or government regulatory authorities having jurisdiction over the financial institution for examination, compliance, or other purposes as authorized by law.
(9) When a financial institution is reporting a known or suspected instance of elder or dependent adult financial abuse or is cooperating with a local adult protective services agency investigation of known or suspected elder or dependent adult financial abuse pursuant to Article 3 (commencing with Section 15630) of Chapter 11 of Part 3 of Division 9 of the Welfare and Institutions Code.
(10) The confidential consumer information is released to an affiliate or a nonaffiliated third party in order for the affiliate or nonaffiliated third party to perform services for or functions on behalf of, the financial institution in connection with the financial institution's products and services, such as mailing services, data processing or analysis, or customer surveys, provided that all of the following requirements are met:
(A) The services to be performed by the affiliate or nonaffiliated third party would be lawful if performed by the financial institution.
(B) If the confidential consumer information is disclosed to an affiliate, the affiliate does not use or disclose the confidential consumer information other than to carry out the purpose for which the financial institution disclosed the information.
(C) If the confidential consumer information is disclosed to a nonaffiliated third party, there is a written contract between the nonaffiliated third party and the financial institution that prohibits the nonaffiliated third party from disclosing or using the confidential consumer information other than to carry out the purpose for which the financial institution disclosed the information, as set forth in the written contract.
(D) The confidential consumer information provided to the affiliate or nonaffiliated third party is limited to that which is reasonably necessary for the affiliate or nonaffiliated third party to perform services for on behalf of the financial institution.
(11) The confidential consumer information is released to identify or locate missing and abducted children, witnesses, criminals and fugitives, parties to lawsuits, parents delinquent in child support payments, organ and bone marrow donors, pension fund beneficiaries, and missing heirs.
(c) Nothing in this Article is intended to change existing law relating to access by law enforcement agencies to information held by financial institutions.
(Added by Ord. 237-02, File No. 021339, App. 12/20/2002)