Section 26-A3609. LIMITS ON REDISCLOSURE AND REUSE OF INFORMATION

 

3609.1Except as otherwise provided in this regulation, if a licensee receives nonpublic personal information about a consumer from a nonaffiliated financial institution, the licensee shall not, directly or through an affiliate, disclose the information to any other person that is not affiliated with either the financial institution or licensee, unless the disclosure would be lawful if the licensee made it directly to such other person.

 

3609.2A licensee may disclose nonpublic personal information about a consumer that it receives from a nonaffiliated financial institution in accordance with an exception under §§ 3606, 3607 or 3608 only for the purpose of that exception.

 

3609.3Except as otherwise provided in this regulation, if a licensee discloses nonpublic personal information about a consumer to a nonaffiliated financial institution, that party shall not, directly or through an affiliate, disclose the information to any other person that is a nonaffiliated third party of both the licensee and that party, unless the disclosure would be lawful if the licensee made it directly to such other person.

 

3609.4A nonaffiliated third party may disclose nonpublic personal information about a consumer that it receives from the licensee in accordance with an exception under §§ 3606, 3607 or 3608 only for the purpose of that exception.

 

source

Emergency Rulemaking published at 47 DCR 9052(November 10, 2000) [EXPIRED]; Emergency Rulemaking published at 48 DCR 2356(March 16, 2001) [EXPIRED]; as Emergency Rulemaking published at 48 DCR 6119(July 1, 2001) [EXPIRED]; as Final Rulemaking published at 48 DCR 8005 (August 24, 2001).