Which element is excluded from the privacy notices required under the Gramm-Leach-Bliley Act?

The Gramm-Leach-Bliley Act (GLBA) establishes requirements for financial institutions regarding the handling of non-public personal information. The act mandates that institutions issue privacy notices to their customers that detail how their personal information is collected, used, and shared.

While privacy notices must cover various aspects—such as the source of non-public personal information, the sharing of that information, and how it is protected—sample lists of customers’ information are not required to be included in these notices. The intent behind the GLBA is to inform consumers and protect their privacy without exposing sensitive data or specific examples that could compromise individual privacy.

By excluding sample lists, the act helps ensure that personal information remains confidential and is not disclosed in a manner that could lead to unauthorized access or misuse. This focus on protecting individuals' privacy aligns with the overarching goals of the GLBA in safeguarding consumers.