R590-206-2. Purpose and Scope

(1) The purpose of this rule is to: (a) govern a licensee's treatment of an individual's nonpublic personal health information and nonpublic personal financial information; (b) require a licensee to provide notice to an individual about the licensee's privacy policies and practices; (c) describe the conditions under which a licensee may disclose an individual's nonpublic personal health information and nonpublic personal financial information to an affiliate or nonaffiliated third party; and (d) provide means by which an individual may prevent a licensee from disclosing the individual's nonpublic information. (2) This rule applies to a licensee who obtains nonpublic personal financial information or nonpublic personal health information regarding a customer or consumer of a product or service primarily for a personal, family, or household purpose. (3) This rule does not apply to: (a) a licensee with information about a person who obtains a product or service for a business, commercial, or agricultural purpose; (b) a person selling or providing: (i) a manufacturer warranty; (ii) a manufacturer service contract paid for with consideration, in addition to the consideration paid for the product; or (iii) a service contract for the repair or maintenance of goods, including motor vehicles, that is paid for with consideration in addition to consideration paid for the product; (c) a financial institution; (d) a securities broker or dealer; or (e) a credit union that engages in an activity or function that does not require a license from the commissioner.