In this situation, you may use the information internally for your own purposes. However, you may only redisclose the information consistent with the privacy policy of the originating financial institution. In other words, you step into the shoes of the originating financial institution and may disclose the same kinds of NPI to the same entities as the originating institution. For example, if the originating financial institution's privacy notice informed its consumers and customers that it would only share their NPI with "nonfinancial institutions, such as charitable organizations," you may redisclose the NPI to charitable institutions as well. However, because the originating institution does not disclose NPI to another financial institution, such as an insurance provider, you cannot because that type of company is not covered by the privacy policy.

You may also disclose the information to your affiliates, whose redisclosure is limited in the same way as you, and to affiliates of the originating financial institution.

[back to Table of Contents]

IV. DISCLOSURE OF ACCOUNT NUMBERS IS PROHIBITED