On this same topic, ID Theft Prevention product, how do you relate it to your privacy notice? The bank partners with the company and signs up the customer, the vendor then contacts the customer and the customer goes to their website and enrolls and gives their personal details and the vendor delivers the service. The bank account facilitates the billing source, but I think they can change their billing method.
Are we joint marketing or are they a non-affiliated third party? I looked at several banks websites that have the same ID theft protection product, and none of them said the bank joint markets or shares with nonaffiliates on the privacy notice on the website.