Rules for
Privacy of Consumer Financial Information
Regulation S-P
Rule 11 -- Limits on Redisclosure and Reuse of Information
Information you receive under an exception.
If you receive nonpublic personal information from a nonaffiliated financial
institution under an exception in Rule 14 or Rule
15, your disclosure and use of that information is limited as follows:
You may disclose the information to
the affiliates of the financial institution from which you received
the information;
You may disclose the information to
your affiliates, but your affiliates may, in turn, disclose and use
the information only to the extent that you may disclose and use the
information; and
You may disclose and use the information
pursuant to an exception in Rule 14 or Rule 15 in the ordinary course
of business to carry out the activity covered by the exception under
which you received the information.
Example. If you receive a customer
list from a nonaffiliated financial institution in order to provide account-processing
services under the exception in Rule 14(a), you may disclose that information
under any exception in Rule 14 or Rule 15 in the ordinary course of business
in order to provide those services. You could also disclose that information
in response to a properly authorized subpoena or in the ordinary course
of business to your attorneys, accountants, and auditors. You could not
disclose that information to a third party for marketing purposes or use
that information for your own marketing purposes.
Information you receive outside of an
exception. If you receive nonpublic personal information from a nonaffiliated
financial institution other than under an exception in Rule 14 or Rule
15, you may disclose the information only:
To the affiliates of the financial
institution from which you received the information;
To your affiliates, but your affiliates
may, in turn, disclose the information only to the extent that you
can disclose the information; and
To any other person, if the disclosure
would be lawful if made directly to that person by the financial institution
from which you received the information.
Example. If you obtain a customer
list from a nonaffiliated financial institution outside of the exceptions
in Rule 14 and Rule 15:
You may use that list for your own
purposes;
You may disclose that list to another
nonaffiliated third party only if the financial institution from which
you purchased the list could have lawfully disclosed the list to that
third party. That is, you may disclose the list in accordance with
the privacy policy of the financial institution from which you received
the list, as limited by the opt out direction of each consumer whose
nonpublic personal information you intend to disclose, and you may
disclose the list in accordance with an exception in Rule 14 or Rule
15, such as in the ordinary course of business to your attorneys,
accountants, or auditors.
Information you disclose under an exception.
If you disclose nonpublic personal information to a nonaffiliated third party
under an exception in Rule 14 or Rule 15, the third party may disclose and
use that information only as follows:
The third party may disclose the information
to your affiliates;
The third party may disclose the information
to its affiliates, but its affiliates may, in turn, disclose and use the
information only to the extent that the third party may disclose and use
the information; and
The third party may disclose and use the
information pursuant to an exception in Rule 14 or Rule 15 in the ordinary
course of business to carry out the activity covered by the exception
under which it received the information.
Information you disclose outside of an exception.
If you disclose nonpublic personal information to a nonaffiliated third party
other than under an exception in Rule 14 or Rule
15, the third party may disclose the information only:
To your affiliates;
To its affiliates, but its affiliates, in
turn, may disclose the information only to the extent the third party
can disclose the information; and
To any other person, if the disclosure would
be lawful if you made it directly to that person.
Notice to Users: The Deskbook is made available
with the understanding that the University of Cincinnati College
of Law is not engaged in rendering legal, accounting or other professional
services. If legal advice or other expert assistance is required,
the services of a competent professional person should be sought. See Terms and Conditions of Use.