From a Reg P document from the FRB 06-02.
Section 216.13 allows you to disclose a consumer’s nonpublic personal information to a nonaffiliated third party who performs services for you or functions on your behalf without providing the consumer an opt-out notice. However, to qualify for this exception, you must (1) enter into a contractual agreement prohibiting the third-party recipient from disclosing or using the nonpublic personal information other than to carry out the purpose(s) for which you disclose the information and (2) provide an initial notice to the consumer, whether or not he or she is your customer, that includes a separate statement describing the categories of information you disclose and the parties with whom you have contracted. §§ 216.6(a)(5) and 216.13(a)(1). If you satisfy these requirements, you could, for example, enter an arrangement under which you disclose nonpublic personal information to a nonaffiliated third party that markets your own financial products and services, such as a telemarketer or direct mail marketer.
_________________________
AndyZ CRCM
My opinions are not necessarily my employers.
R+R-R=R+R
Rules and Regs minus Relationships equals Resentment and Rebellion. John Maxwell