Loading...
(a) Nothing in this Article shall require a financial institution to provide a written or electronic notice to a consumer pursuant to Section 2004(a) if the financial institution does not disclose confidential consumer information to any nonaffiliated third-party, except as provided in Section 2006.
(c) A financial institution shall provide written or electronic notices and consent acknowledgments to consumers as separate documents that are easily identifiable and distinguishable from other documents that otherwise may be provided to a consumer. A notice provided to a member of a household pursuant to Section 2004 shall be considered notice to all members of that household unless that household contains another individual who also has a separate account with the financial institution. Such notices may be sent to the consumer with other notices required under the federal Gramm, Leach and Bliley Act, 15 U.S.C. Secs. 6801 et seq.
(Added by Ord. 237-02, File No. 021339, App. 12/20/2002)
(a) This Article shall not apply to information that is not personally identifiable to a particular person.
(1) The confidential consumer information is necessary to effect, administer, or enforce a transaction requested or authorized by the consumer, or in connection with servicing or processing a financial product or service requested or authorized by the consumer, or in connection with maintaining or servicing the consumer's account with the financial institution, or with another entity as part of a private label credit card program, or other extension of credit on behalf of such entity, or in connection with a proposed or actual securitization or secondary market sale, including sales of servicing rights, related to a transaction of the consumer.
(2) The confidential consumer information is released with the consent of or at the direction of the consumer.
(3) The confidential consumer information is:
(A) Released to protect the confidentiality or security of the financial institution's records pertaining to the consumer, the service or product, or the transaction therein.
(B) Released to protect against or prevent actual or potential fraud, identity theft, unauthorized transactions, claims, or other liability.
(C) Released for required institutional risk control, or for resolving customer disputes or inquiries.
(D) Released to persons holding a legal or beneficial interest relating to the consumer.
(E) Released to persons acting in a fiduciary or representative capacity on behalf of the consumer.
(4) The confidential consumer information is released to provide information to insurance rate advisory organizations, guaranty funds or agencies, applicable rating agencies of the financial institution, persons assessing the institution's compliance with industry standards, and the institution's attorneys, accountants, and auditors.
(5) The confidential consumer information is released to the extent specifically required or specifically permitted under other provisions of law and in accordance with the Right to Financial Privacy Act of 1978 (12 U.S.C. Sec. 3401 et seq.), to law enforcement agencies, including a federal functional regulator, the Secretary of the Treasury with respect to subchapter II of Chapter 53 of Title 31, and Chapter 2 of Title I of Public Law 91-508 (12 U.S.C. Secs. 1951 – 1959), the California Department of Insurance, or the Federal Trade Commission, and self-regulatory organizations.
(6) The confidential consumer information is released (A) to a consumer reporting agency in accordance with the Fair Credit Reporting Act (15 U.S.C. Sec. 1681 et seq.); or (B) from a consumer report reported by a consumer reporting agency.
(7) The confidential consumer information is released in connection with a proposed or actual sale, merger, transfer, or exchange of all or a portion of a business or operating unit if the disclosure of confidential consumer information concerns solely consumers of the business or unit.
(8) The confidential consumer information is released to comply with federal, state, or local laws, rules, and other applicable legal requirements; to comply with a properly authorized civil, criminal, or regulatory investigation or subpoena or summons by federal, state, or local authorities; or to respond to judicial process or government regulatory authorities having jurisdiction over the financial institution for examination, compliance, or other purposes as authorized by law.
(9) When a financial institution is reporting a known or suspected instance of elder or dependent adult financial abuse or is cooperating with a local adult protective services agency investigation of known or suspected elder or dependent adult financial abuse pursuant to Article 3 (commencing with Section 15630) of Chapter 11 of Part 3 of Division 9 of the Welfare and Institutions Code.
(10) The confidential consumer information is released to an affiliate or a nonaffiliated third party in order for the affiliate or nonaffiliated third party to perform services for or functions on behalf of, the financial institution in connection with the financial institution's products and services, such as mailing services, data processing or analysis, or customer surveys, provided that all of the following requirements are met:
(A) The services to be performed by the affiliate or nonaffiliated third party would be lawful if performed by the financial institution.
(B) If the confidential consumer information is disclosed to an affiliate, the affiliate does not use or disclose the confidential consumer information other than to carry out the purpose for which the financial institution disclosed the information.
(C) If the confidential consumer information is disclosed to a nonaffiliated third party, there is a written contract between the nonaffiliated third party and the financial institution that prohibits the nonaffiliated third party from disclosing or using the confidential consumer information other than to carry out the purpose for which the financial institution disclosed the information, as set forth in the written contract.
(D) The confidential consumer information provided to the affiliate or nonaffiliated third party is limited to that which is reasonably necessary for the affiliate or nonaffiliated third party to perform services for on behalf of the financial institution.
(11) The confidential consumer information is released to identify or locate missing and abducted children, witnesses, criminals and fugitives, parties to lawsuits, parents delinquent in child support payments, organ and bone marrow donors, pension fund beneficiaries, and missing heirs.
(c) Nothing in this Article is intended to change existing law relating to access by law enforcement agencies to information held by financial institutions.
(Added by Ord. 237-02, File No. 021339, App. 12/20/2002)
(a) The restrictions on disclosure and use of confidential consumer information, and the requirement for notification, disclosure, and opportunity for the consumer to either direct that the confidential consumer information not be disclosed or provided prior written consent, as provided in this Article, do not apply to any person or entity that meets paragraph (1) or (2) except when confidential consumer information is or will be shared with an affiliate or nonaffiliated third party.
(1) The person or entity is licensed in one or both of the following categories and is acting within the scope of the respective license:
(A) As an insurance producer licensed pursuant to Chapter 5 (commencing with Section 1621), Chapter 6 (commencing with Section 1760), or Chapter 8 (commencing with Section 1831) of Division 1 of the Insurance Code.
(B) Is duly licensed to sell securities.
(2) The person or entity meets the requirements in paragraph (1) and has a written contractual agreement with another person or entity described in paragraph (1) and the contract clearly and explicitly includes the following:
(A) The rights and obligations between the licensees arising out of the business relationship relating to insurance or securities transactions.
(B) An explicit limitation on the use of confidential consumer information about a consumer to transactions authorized by the contract and permitted pursuant to this Article.
(C) A requirement that transactions specified in the contract fall within the scope of activities permitted by the licenses of the parties.
(b) The restrictions on disclosure and use of confidential consumer information, and the requirement for notification and disclosure provided in this Article, shall not limit the ability of insurance producers and brokers to respond to written or electronic, including telephone, requests from consumers seeking price quotes on insurance products and services.
(Added by Ord. 237-02, File No. 021339, App. 12/20/2002)
(a) Any financial institution that negligently discloses or shares confidential consumer information in violation of this Article shall be liable, irrespective of the amount of damages suffered by the consumer as a result of that violation, for an administrative fine or civil penalty not to exceed two thousand five hundred dollars ($2,500) per violation.
(b) Any financial institution that knowingly and willfully obtains, discloses, or uses confidential consumer information in violation of this Article shall be liable upon a first violation, for an administrative fine or civil penalty not to exceed two thousand five hundred dollars ($2,500) per violation, or upon a second violation for an administrative fine or civil penalty not to exceed ten thousand dollars ($10,000) per violation, or upon a third or subsequent violation for an administrative fine or civil penalty not to exceed twenty-five thousand dollars ($25,000) per violation.
(c) Any financial institution that knowingly and willfully obtains, discloses, or uses confidential consumer information in violation of this Article for financial gain shall be liable upon a first violation for an administrative fine or civil penalty not to exceed five thousand dollars ($5,000) per violation, or upon a second violation for an administrative fine or civil penalty not to exceed twenty-five thousand dollars ($25,000) per violation, or upon a third or subsequent violation for an administrative fine or civil penalty not to exceed two hundred fifty thousand dollars ($250,000) per violation and shall be subject to disgorgement of any proceeds or other consideration obtained as a result of the violation.
(d) Nothing in this Article shall be construed as authorizing an administrative fine or civil penalty under both paragraphs (2) and (3) for the same violation.
(Added by Ord. 237-02, File No. 021339, App. 12/20/2002)
The provisions of this Article shall be severable, and if any phrase, clause, sentence, or provisions is declared to be invalid or is preempted by federal or state law or regulation, the validity of the remainder of this Article shall not be affected thereby.
(Added by Ord. 237-02, File No. 021339, App. 12/20/2002)