GLBA allows the sharing of information to service an account, or to complete a transaction initiated by the consumer.
I think the problem that people get hung up on is the potential that the call is fraudulent and being perpetrated by a fraudster trying to commit some type of identity theft. If you can take reasonable precautions against this, then I don't see any issues with GLBA.
I truly, truly fear that between "privacy" and "suspicious activity", banks are going to become paralyzed by fear from doing anything!
_________________________
CRCM,CAMS
Regulations are a poor substitute for ethics.
Just sayin'