--- title: "12 CFR 1016.13 GLBA: Exception to opt out requirements for service providers and joint marketing" canonical: "https://dposchool.com/glba/section/1016.13" source: "https://www.ecfr.gov/current/title-12/section-1016.13" source_note: "Source: United States Code, title 15, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 12, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. Source: Electronic Code of Federal Regulations (eCFR), title 16, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR." text_as_of: "2026-10-29" language: "en" publisher: "DPO School" --- 12 CFR 1016.13 GLBA · Part 1016: PRIVACY OF CONSUMER FINANCIAL INFORMATION (REGULATION P) · Subpart C: Exceptions # 12 CFR 1016.13 GLBA: Exception to opt out requirements for service providers and joint marketing eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. ## Official text ### 12 CFR 1016.13(a) **(a)** General rule. (1) The opt out requirements in §§ 1016.7 and 1016.10 of this part do not apply when you provide nonpublic personal information to a nonaffiliated third party to perform services for you or functions on your behalf, if you: ##### 12 CFR 1016.13(a)(i) **(i)** Provide the initial notice in accordance with § 1016.4; and ##### 12 CFR 1016.13(a)(ii) **(ii)** Enter into a contractual agreement with the third party that prohibits the third party from disclosing or using the information other than to carry out the purposes for which you disclosed the information, including use under an exception in § 1016.14 or § 1016.15 in the ordinary course of business to carry out those purposes. #### 12 CFR 1016.13(a)(2) **(2)** Example. If you disclose nonpublic personal information under this section to a financial institution with which you perform joint marketing, your contractual agreement with that institution meets the requirements of paragraph (a)(1)(ii) of this section if it prohibits the institution from disclosing or using the nonpublic personal information except as necessary to carry out the joint marketing or under an exception in § 1016.14 or § 1016.15 in the ordinary course of business to carry out that joint marketing. ### 12 CFR 1016.13(b) **(b)** Service may include joint marketing. The services a nonaffiliated third party performs for you under paragraph (a) of this section may include marketing of your own products or services or marketing of financial products or services offered pursuant to joint agreements between you and one or more financial institutions. ### 12 CFR 1016.13(c) **(c)** Definition of joint agreement. For purposes of this section, joint agreement means a written contract pursuant to which you and one or more financial institutions jointly offer, endorse, or sponsor a financial product or service. ## Source Source: Electronic Code of Federal Regulations (eCFR), title 12, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. [12 CFR 1016.13 on eCFR](https://www.ecfr.gov/current/title-12/section-1016.13) eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026. This is reference material, not legal advice. ## Navigation [GLBA Navigator](https://dposchool.com/glba) / 12 CFR 1016.13 Previous: [12 CFR 1016.12 GLBA: Limits on sharing account number information for marketing purposes](https://dposchool.com/glba/section/1016.12) Next: [12 CFR 1016.14 GLBA: Exceptions to notice and opt out requirements for processing and servicing transactions](https://dposchool.com/glba/section/1016.14) ## For AI agents - Machine-readable index: https://dposchool.com/glba/llms.txt - JSON API: https://dposchool.com/glba/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents