Are there any specific regs I can cite to employees about not sharing info with ex-employees? We have an internal policy of not talking shop outside of the bank, but hoping to cite other rules. I don't see this as falling under Reg P, GLBA or anything else other than bank policy and common sense. Thanks for any help.

How is an ex-employee any different than anyone else outside of the institution? GLBA would absolutely apply.

Thank you. I'll head back to GLBA.

It is especially serious if this ex-employee now works for a competitor. People have been banned from banking for disclosing customer information to other institutions. If you have evidence that this has occurred, I think a SAR really needs to be considered.

A SAR and a pink slip, imo.