Answer:
As a service provider, this person would fall under GLB privacy regulation exceptions in Section ___.13(a). You do have to have a contractual arrangement with that person that prohibits them from disclosing or using the information other than for the purposes for which you gave them the information. Also, under the Information Security guidelines, your contract with this person should also stipulate that they will adhere to your standards of information security with regard to the customer information in their possession.
First published on BankersOnline.com 10/4/04