Section 502 of the Gramm-Leach-Bliley
Act (GLBA) (Pub. L. 106-102) generally prohibits a financial
institution from sharing nonpublic personal information about a
consumer with nonaffiliated third parties unless the institution
satisfies various disclosure requirements (including provision of
initial privacy notices, annual notices, notices of revisions to
the institution's privacy policy, and opt-out notices) and the
consumer has not elected to opt out of the information sharing. The
Bureau of Consumer Financial Protection (Bureau) promulgated
regulation P 12 CFR 1016 to implement the GLB Act's notice
requirements and restrictions on a financial institution's ability
to disclose nonpublic personal information about consumers to
nonaffiliated third parties.
The Burden changes reflected
above are as a result of a final rule published August 17th 2018 in
which the Bureau published a final rule (83 FR 40945) making
changes to regulation P in order to conform with legislative
changes to the GLBA. The final rule implements a December 2015
statutory amendment to the GLBA providing an exception to this
annual notice requirement for financial institutions that meet
certain conditions. The Bureau believes that this amendment results
in reduced burden under Regulation P. The change in total
respondents is due to the Bureau correcting an earlier clerical
error in its previous filing by accounting for the number of
individuals who respond to the opt-out notice. The total number of
respondents has not changed; it is just now being accurately
accounted.
On behalf of this Federal agency, I certify that
the collection of information encompassed by this request complies
with 5 CFR 1320.9 and the related provisions of 5 CFR
1320.8(b)(3).
The following is a summary of the topics, regarding
the proposed collection of information, that the certification
covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a
benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control
number;
If you are unable to certify compliance with any of
these provisions, identify the item by leaving the box unchecked
and explain the reason in the Supporting Statement.