16 C.F.R. § 313.11

Limits on redisclosure and reuse of information

Read at: eCFRecfr.gov CornellLII GovInfogovinfo.gov CasesGoogle Scholar

(a)(1) Information you receive under an exception. If you receive nonpublic personal information from a nonaffiliated financial institution under an exception in § 313.14 or § 313.15 of this part, your disclosure and use of that information is limited as follows:

(i) You may disclose the information to the affiliates of the financial institution from which you received the information;

(ii) You may disclose the information to your affiliates, but your affiliates may, in turn, disclose and use the information only to the extent that you may disclose and use the information; and

(iii) You may disclose and use the information pursuant to an exception in § 313.14 or § 313.15 in the ordinary course of business to carry out the activity covered by the exception under which you received the information.

(2) Example. If you receive a customer list from a nonaffiliated financial institution in order to provide account processing services under the exception in § 313.14(a), you may disclose that information under any exception in § 313.14 or § 313.15 in the ordinary course of business in order to provide those services. You could also disclose that information in response to a properly authorized subpoena. You could not disclose that information to a third party for marketing purposes or use that information for your own marketing purposes.

(b)(1) Information you receive outside of an exception. If you receive nonpublic personal information from a nonaffiliated financial institution other than under an exception in § 313.14 or § 313.15 of this part, you may disclose the information only:

(i) To the affiliates of the financial institution from which you received the information;

(ii) To your affiliates, but your affiliates may, in turn, disclose the information only to the extent that you can disclose the information; and

(iii) To any other person, if the disclosure would be lawful if made directly to that person by the financial institution from which you received the information.

(2) Example. If you obtain a customer list from a nonaffiliated financial institution outside of the exceptions in §§ 313.14 and 313.15:

(i) You may use that list for your own purposes; and

(ii) You may disclose that list to another nonaffiliated third party only if the financial institution from which you purchased the list could have lawfully disclosed the list to that third party. That is, you may disclose the list in accordance with the privacy policy of the financial institution from which you received the list, as limited by the opt out direction of each consumer whose nonpublic personal information you intend to disclose, and you may disclose the list in accordance with an exception in § 313.14 or § 313.15, such as to your attorneys or accountants.

(c) Information you disclose under an exception. If you disclose nonpublic personal information to a nonaffiliated third party under an exception in § 313.14 or 313.15 of this part, the third party may disclose and use that information only as follows:

(1) The third party may disclose the information to your affiliates;

(2) The third party may disclose the information to its affiliates, but its affiliates may, in turn, disclose and use the information only to the extent that the third party may disclose and use the information; and

(3) The third party may disclose and use the information pursuant to an exception in § 313.14 or § 313.15 in the ordinary course of business to carry out the activity covered by the exception under which it received the information.

(d) Information you disclose outside of an exception. If you disclose nonpublic personal information to a nonaffiliated third party other than under an exception in § 313.14 or § 313.15 of this part, the third party may disclose the information only:

(1) To your affiliates;

(2) To its affiliates, but its affiliates, in turn, may disclose the information only to the extent the third party can disclose the information; and

(3) To any other person, if the disclosure would be lawful if you made it directly to that person.

Notes of Decisions
Cited in 6 cases, 2001–2016 · leading case: Ameriquest Mortg. Co. v. Off. of the Attorney Gen., 170 Wash. 2d 418 (Wash. 2010).
Ameriquest Mortg. Co. v. Off. of the Attorney Gen., 170 Wash. 2d 418 (Wash. 2010). · cites it 7× “§ 6802 (c); 16 C.F.R. § 313.11 (c)(l)-(2), (d)(l)-(2).”
Ameriquest Mortg. v. Off. of Atty. Gen., 241 P.3d 1245 (Wash. 2010). · cites it 7× “§ 6802 (c); 16 C.F.R. § 313.11 (c)(1)-(2),.11(d)(1)-(2).”
Doe v. Washington State Patrol, 374 P.3d 63 (Wash. 2016). · cites it 2× “§§ 6801-6809 , and the relevant Federal Trade Commission rule, 16 C.F.R. § 313.11 (c)-(d). Id. at 429-30 .”
Ameriquest Mortg. Co. v. Off. of Attorney Gen., 300 P.3d 799 (Wash. 2013). · cites it 3× “§ 6802 (c); 16 C.F.R. § 313.11 (c)-(d). ¶20 In Ameriquest, the parties to the present case agreed that Ameriquest “is a ‘financial institution’ and that the AGO received ‘nonpublic personal information’ from Ameriquest.”
Individual Reference Servs. Grp., Inc. v. Fed. Trade Comm'n, 145 F. Supp. 2d 6 (D.D.C. 2001). · cites it 2× “” 16 C.F.R. § 313.11 (a)(iii). 23 1. Chevron Step One First, Trans Union argues that these regulations are invalid because it and other CRAs will no longer be able to disclose or even use information that they receive pursuant to the FCRA for the creation or disclosure of…”
Trans Union LLC v. Fed. Trade Comm'n, 295 F.3d 42 (D.C. Cir. 2002). · cites it 2× ““Reuse” Regulation Next, Trans Union raises two objections to the “reuse” restrictions set out in 16 C.F.R. § 313.11 which limit the manner in which a third party, such as a CRA, may “use” information it receives from a financial institution, as, for example, in a credit report…”
— 16 C.F.R. § 313.11(c)(3) — 1 case
Ameriquest Mortg. Co. v. Off. of the Attorney Gen., 170 Wash. 2d 418 (Wash. 2010). “§ 6802 (c); 16 C.F.R. § 313.11 (c)(l)-(2), (d)(l)-(2).”
Annotations are extracted automatically from the opinions in the Syfert caselaw corpus and ranked by authority, recency, and treatment. Dots show Syfertize treatment of the citing case itself.