<?xml version='1.0' encoding='utf-8'?>
<regulation prefix="Regulation" num=".09" citation="COMAR 31.16.08.09" title_num="31" subtitle_num="16" chapter_num="08" heading="Revised Privacy Notices for Financial Information.">
  <paragraph num="A.">
    <text>Except as otherwise authorized in this chapter, a licensee may not, directly or through an affiliate, disclose any nonpublic personal financial information about a consumer to a nonaffiliated third party other than as described in the initial notice that the licensee provided to that consumer under Regulation .05 of this chapter, unless:</text>
    <paragraph num="(1)">
      <text>The licensee has provided to the consumer a clear and conspicuous revised notice that accurately describes its policies and practices;</text>
    </paragraph>
    <paragraph num="(2)">
      <text>The licensee has provided to the consumer a new opt out notice;</text>
    </paragraph>
    <paragraph num="(3)">
      <text>The licensee has given the consumer a reasonable opportunity, before the licensee discloses the information to the nonaffiliated third party, to opt out of the disclosure; and</text>
    </paragraph>
    <paragraph num="(4)">
      <text>The consumer does not opt out.</text>
    </paragraph>
  </paragraph>
  <paragraph num="B.">
    <text>Revised Notice.</text>
    <paragraph num="(1)">
      <text>Except as otherwise permitted by Regulations .14, .15, and .16 of this chapter, a licensee shall provide a revised notice before it discloses:</text>
      <paragraph num="(a)">
        <text>A new category of nonpublic personal financial information to any nonaffiliated third party;</text>
      </paragraph>
      <paragraph num="(b)">
        <text>Nonpublic personal financial information to a new category of nonaffiliated third party; or</text>
      </paragraph>
      <paragraph num="(c)">
        <text>Nonpublic personal financial information about a former customer to a nonaffiliated third party, if that former customer has not had the opportunity to exercise an opt out right regarding that disclosure.</text>
      </paragraph>
    </paragraph>
    <paragraph num="(2)">
      <text>A revised notice is not required if the licensee discloses nonpublic personal financial information to a new nonaffiliated third party that the licensee adequately described in its prior notice.</text>
    </paragraph>
  </paragraph>
  <paragraph num="C.">
    <text>A licensee required to deliver a revised privacy notice under this regulation shall deliver it in accordance with Regulation .10 of this chapter.</text>
  </paragraph>
</regulation>