Examples of Nonpublic Personal Information
Definition of Nonpublic Personal Information
Key Facts
- Names: Personal names that are not publicly available.
- Addresses: Residential or business addresses that are not publicly accessible.
- Phone Numbers: Personal or business phone numbers that are not publicly listed.
- Social Security Numbers: Unique identification numbers assigned to individuals by the government.
- Income: Financial information related to an individual’s earnings and sources of income.
- Credit Score: A numerical representation of an individual’s creditworthiness.
- Financial Account Information: Details about an individual’s bank accounts, credit card accounts, or investment accounts.
- Personal Identification Numbers (PINs): Secret codes used to access personal accounts.
- Health Information: Medical records, health insurance information, or other sensitive health-related data.
- Biometric Data: Unique physical or behavioral characteristics, such as fingerprints or voiceprints.
- Internet Collection Devices: Information obtained through online tracking technologies like cookies.
Nonpublic personal information (NPI) refers to any information that is not publicly available and that can be used to identify an individual. It includes information that is collected by financial institutions when they offer or deliver financial products or services to individuals for personal, family, or household purposes.
Examples of Nonpublic Personal Information
- Names: Personal names that are not publicly available.
- Addresses: Residential or business addresses that are not publicly accessible.
- Phone Numbers: Personal or business phone numbers that are not publicly listed.
- Social Security Numbers: Unique identification numbers assigned to individuals by the government.
- Income: Financial information related to an individual’s earnings and sources of income.
- Credit Score: A numerical representation of an individual’s creditworthiness.
- Financial Account Information: Details about an individual’s bank accounts, credit card accounts, or investment accounts.
- Personal Identification Numbers (PINs): Secret codes used to access personal accounts.
- Health Information: Medical records, health insurance information, or other sensitive health-related data.
- Biometric Data: Unique physical or behavioral characteristics, such as fingerprints or voiceprints.
- Internet Collection Devices: Information obtained through online tracking technologies like cookies.
Importance of Protecting Nonpublic Personal Information
NPI is valuable to criminals because it can be used to commit identity theft, fraud, or other crimes. It is important for financial institutions to protect NPI by implementing strong security measures and by following the requirements of the Gramm-Leach-Bliley Act (GLBA).
Sources
- FDIC Consumer Compliance Examination Manual
- FTC: How to Comply with the Privacy of Consumer Financial Information Rule of the Gramm-Leach-Bliley Act
- University of Colorado: GLBA Safeguards Rule: Examples of Nonpublic Personal Information
FAQs
What is nonpublic personal information?
Nonpublic personal information (NPI) is any information that is not publicly available and that can be used to identify an individual. It includes information that is collected by financial institutions when they offer or deliver financial products or services to individuals for personal, family, or household purposes.
What are some examples of nonpublic personal information?
Examples of NPI include names, addresses, phone numbers, Social Security numbers, income, credit scores, financial account information, personal identification numbers (PINs), health information, biometric data, and information obtained through online tracking technologies like cookies.
Why is it important to protect nonpublic personal information?
NPI is valuable to criminals because it can be used to commit identity theft, fraud, or other crimes. It is important for financial institutions to protect NPI by implementing strong security measures and by following the requirements of the Gramm-Leach-Bliley Act (GLBA).
What are some tips for protecting nonpublic personal information?
Here are some tips for protecting your NPI:
-
- Be careful about what information you share online.
-
- Use strong passwords and don’t reuse them across multiple accounts.
-
- Be aware of phishing scams and never click on links or open attachments from unknown senders.
-
- Shred any documents that contain your NPI before you throw them away.
-
- Monitor your credit reports and bank statements regularly for any unauthorized activity.
What should I do if I think my nonpublic personal information has been compromised?
If you think your NPI has been compromised, you should take the following steps:
-
- Contact the financial institution that you believe has compromised your NPI.
-
- File a police report.
-
- Contact the fraud department of the three major credit bureaus (Equifax, Experian, and TransUnion).
-
- Consider freezing your credit to prevent new accounts from being opened in your name.
What are the penalties for violating the Gramm-Leach-Bliley Act?
Violations of the GLBA can result in civil penalties of up to $100,000 per violation. Criminal penalties may also be imposed, including fines and imprisonment.
How can I file a complaint about a violation of the Gramm-Leach-Bliley Act?
You can file a complaint about a violation of the GLBA with the Consumer Financial Protection Bureau (CFPB) online at https://www.consumerfinance.gov/complaint/.