15 U.S.C. §6801/§6802 (GLBA) templates 💎
A) To the Creditor/Collector/Furnisher (Primary Letter) [Your Full Name] [Your Current Address] [City, State ZIP] [Email] | [Phone] [Date] [Creditor/Collector/Furnisher Name] [Attn: Compliance/Privacy Office] [Mailing Address] [City, State ZIP] RE: Privacy & Disclosure Demand under the Gramm–Leach–Bliley Act (15 U.S.C. §§ 6801–6802) Account: [Account Number/Reference] | Last 4 SSN: [XXXX] To Whom It May Concern: I am asserting my rights under the Gramm–Leach–Bliley Act (GLBA), 15 U.S.C. §§ 6801–6802, and applicable privacy regulations. This is a formal demand regarding your collection, use, and disclosure of my nonpublic personal information (NPI). 1) REQUIRED WRITTEN ATTESTATION OF COMPLIANCE Provide a written certification within 30 days that: • You maintain and enforce information-security standards as required by 15 U.S.C. §6801(b) and the Safeguards Rule; and • Any sharing/disclosure of my NPI complies with 15 U.S.C. §6802, including notice, permissible purpose, and opt-out where applicable. 2) FULL ACCOUNTING OF DISCLOSURES Provide a complete list (dates, recipients, and purposes) of all disclosures of my NPI in the last 24 months, including to consumer reporting agencies, affiliates, service providers, and any third parties. Identify the statutory or contractual basis for each disclosure. 3) OPT-OUT / CEASE NON-ESSENTIAL SHARING Effective immediately, I **opt out** of any non-affiliated third-party sharing that is not strictly required by law or to service/maintain the account. Cease any marketing or ancillary sharing under 15 U.S.C. §6802(b)–(c) except as legally mandated. 4) VERIFICATION OF PERMISSIBLE PURPOSE If you are furnishing or have furnished information about me to any consumer reporting agency, identify the asserted permissible purpose(s) and the specific contractual or statutory authority relied upon. 5) DATA MINIMIZATION & CORRECTION If you maintain inaccurate or unnecessary NPI (including outdated personal identifiers, prior addresses, or employer data), restrict use and correct/delete such data. Confirm corrections in writing.