[Code of Federal Regulations]
[Title 12, Volume 6]
[Revised as of January 1, 2008]
From the U.S. Government Printing Office via GPO Access
[CITE: 12CFR716.8]

[Page 576]
 
                       TITLE 12--BANKS AND BANKING
 
            CHAPTER VII--NATIONAL CREDIT UNION ADMINISTRATION
 
PART 716_PRIVACY OF CONSUMER FINANCIAL INFORMATION--Table of Contents
 
                  Subpart A_Privacy and Opt Out Notices
 
Sec. 716.8  Revised privacy notices.

    (a) General rule. Except as otherwise authorized in this part, you 
must not, directly or through any affiliate, disclose any nonpublic 
personal information about a consumer to a nonaffiliated third party 
other than as described in the initial notice that you provided to that 
consumer under Sec. 716.4, unless:
    (1) You have provided to the consumer a revised notice that 
accurately describes your policies and practices;
    (2) You have provided to the consumer a new opt out notice;
    (3) You have given the consumer a reasonable opportunity, before you 
disclose the information to the nonaffiliated third party, to opt out of 
the disclosure; and
    (4) The consumer does not opt out.
    (b) Examples. (1) Except as otherwise permitted by Sec. Sec. 
716.13, 716.14 and 716.15, you must provide a revised notice if you--
    (i) Disclose a new category of nonpublic personal information to any 
nonaffiliated third party;
    (ii) Disclose nonpublic personal information to a new category of 
nonaffiliated third party; or
    (iii) Disclose nonpublic personal information about a former member 
to a nonaffiliated third party, and that former member has not had the 
opportunity to exercise an opt out right regarding that disclosure.
    (2) A revised notice is not required if you disclose nonpublic 
personal information to a new nonaffiliated third party that you 
adequately described in your prior notice.
    (c) Delivery. When you are required to deliver a revised privacy 
notice by this section, you must deliver it according to the methods in 
Sec. 716.9.