Section 502 of the Gramm-Leach-Bliley Act (GLBA) (Pub. L. 106-102) generally prohibits a financial institution from sharing nonpublic personal information about a consumer with nonaffiliated third parties unless the institution satisfies various disclosure requirements (including provision of initial privacy notices, annual notices, notices of revisions to the institution's privacy policy, and opt-out notices) and the consumer has not elected to opt out of the information sharing. The Bureau of Consumer Financial Protection (Bureau) promulgated regulation P 12 CFR 1016 to implement the GLB Act's notice requirements and restrictions on a financial institution's ability to disclose nonpublic personal information about consumers to nonaffiliated third parties.
The Burden changes reflected above are as a result of a final rule published August 17th 2018 in which the Bureau published a final rule (83 FR 40945) making changes to regulation P in order to conform with legislative changes to the GLBA. The final rule implements a December 2015 statutory amendment to the GLBA providing an exception to this annual notice requirement for financial institutions that meet certain conditions. The Bureau believes that this amendment results in reduced burden under Regulation P.
The change in total respondents is due to the Bureau correcting an earlier clerical error in its previous filing by accounting for the number of individuals who respond to the opt-out notice. The total number of respondents has not changed; it is just now being accurately accounted.
On behalf of this Federal agency, I certify that the collection of information encompassed by this request complies with 5 CFR 1320.9 and the related provisions of 5 CFR 1320.8(b)(3).
The following is a summary of the topics, regarding the proposed collection of information, that the certification covers:
(i) Why the information is being collected;
(ii) Use of information;
(iii) Burden estimate;
(iv) Nature of response (voluntary, required for a benefit, or mandatory);
(v) Nature and extent of confidentiality; and
(vi) Need to display currently valid OMB control number;
If you are unable to certify compliance with any of these provisions, identify the item by leaving the box unchecked and explain the reason in the Supporting Statement.