12 CFR 1016.8 GLBA · Part 1016: PRIVACY OF CONSUMER FINANCIAL INFORMATION (REGULATION P) · Subpart A: Privacy and Opt Out Notices
12 CFR 1016.8 GLBA: Revised privacy notices
eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.
Official text
General rule. Except as otherwise authorized in this part, you must not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party other than as described in the initial notice that you provided to that consumer under § 1016.4 of this part, unless:
You have provided to the consumer a clear and conspicuous revised notice that accurately describes your policies and practices;
You have provided to the consumer a new opt out notice;
You have given the consumer a reasonable opportunity, before you disclose the information to the nonaffiliated third party, to opt out of the disclosure; and
The consumer does not opt out.
Examples. (1) Except as otherwise permitted by §§ 1016.13, 1016.14, and 1016.15 of this part, you must provide a revised notice before you:
Disclose a new category of nonpublic personal information to any nonaffiliated third party;
Disclose nonpublic personal information to a new category of nonaffiliated third party; or
Disclose nonpublic personal information about a former customer to a nonaffiliated third party, if that former customer has not had the opportunity to exercise an opt out right regarding that disclosure.
A revised notice is not required if you disclose nonpublic personal information to a new nonaffiliated third party that you adequately described in your prior notice.
Delivery. When you are required to deliver a revised privacy notice by this section, you must deliver it according to § 1016.9 of this part.
Source: Electronic Code of Federal Regulations (eCFR), title 12, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR.
eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.
This is reference material, not legal advice.