17 C.F.R. § 248.1

Purpose and scope

Read at: eCFRecfr.gov CornellLII GovInfogovinfo.gov CasesGoogle Scholar

(a) Purpose. This subpart governs the treatment of nonpublic personal information about consumers by the financial institutions listed in paragraph (b) of this section. This subpart:

(1) Requires a financial institution to provide notice to customers about its privacy policies and practices;

(2) Describes the conditions under which a financial institution may disclose nonpublic personal information about consumers to nonaffiliated third parties; and

(3) Provides a method for consumers to prevent a financial institution from disclosing that information to most nonaffiliated third parties by “opting out” of that disclosure, subject to the exceptions in §§ 248.13, 248.14, and 248.15.

(b) Scope. Except with respect to § 248.30(b), this subpart applies only to nonpublic personal information about individuals who obtain financial products or services primarily for personal, family, or household purposes from the institutions listed below. This subpart does not apply to information about companies or about individuals who obtain financial products or services primarily for business, commercial, or agricultural purposes. This part applies to brokers, dealers, and investment companies, as well as to investment advisers that are registered with the Commission. It also applies to foreign (non-resident) brokers, dealers, investment companies and investment advisers that are registered with the Commission. These entities are referred to in this subpart as “you.” This subpart does not apply to foreign (non-resident) brokers, dealers, investment companies and investment advisers that are not registered with the Commission. Nothing in this subpart modifies, limits, or supersedes the standards governing individually identifiable health information promulgated by the Secretary of Health and Human Services under the authority of sections 262 and 264 of the Health Insurance Portability and Accountability Act of 1996 (42 U.S.C. 1320d-1320d-8).

[65 FR 40362, June 29, 2000, as amended at 69 FR 71329, Dec. 8, 2004]

Notes of Decisions

Cited in 5 cases (2 in the last 5 years), 2004–2025 · leading case: IKB Int'l S.A. v. Stanley, 142 A.D.3d 447 (N.Y. App. Div. 2016).

Sort: Relevance Newest Treatment

IKB Int'l S.A. v. Stanley, 142 A.D.3d 447 (N.Y. App. Div. 2016). “They further claim that they would not have received the loan files even if they had been requested because of applicable regulations protecting the borrowers’ personal information (see 17 CFR 248.1 [SEC Privacy of Consumer Financial Information]).”

Martino v. Barnett, 595 S.E.2d 65 (W. Va. 2004). “18 (Federal Trade Commission); 17 C.F.R. §§ 248.1 to 248.30 (Securities and Exchange Commission).”

Holjes v. Lincoln Nat'l Life Ins. Co. (D. Conn. 2024). “See 17 C.F.R. § 248.1 (b). has an ethical duty of confidentiality that prevents disclosure of clients' financial information, but that rule only generally provides that members must "observe high standards of commercial honor and just and equitable principles of trade.”

Roach v. Credit Acceptance Corp. (E.D. Pa. 2025). “Roach could not pursue a claim under: • 17 C.F.R. § 248.1 (a), because Credit Acceptance is not registered with the Securities and Exchange Commission; • 12 U.”

Prudential Ins. Co. of Am. v. Sandvold, 845 F. Supp. 2d 971 (D. Minnesota 2012). “1338, and *974 SEC Regulation S-P, 17 C.F.R. § 248.1 , et seg. These compliance concerns add to the threat of irreparable harm that already existed when the court issued its TRO.”

Annotations are extracted automatically from the opinions in the Syfert caselaw corpus and ranked by authority, recency, and treatment. Dots show Syfertize treatment of the citing case itself.