Section R590-206-2 - Purpose and Scope(1) The purpose of this rule is to:(a) govern a licensee's treatment of an individual's nonpublic personal health information and nonpublic personal financial information;(b) require a licensee to provide notice to an individual about the licensee's privacy policies and practices;(c) describe the conditions under which a licensee may disclose an individual's nonpublic personal health information and nonpublic personal financial information to an affiliate or nonaffiliated third party; and(d) provide means by which an individual may prevent a licensee from disclosing the individual's nonpublic information.(2) This rule applies to a licensee who obtains nonpublic personal financial information or nonpublic personal health information regarding a customer or consumer of a product or service primarily for a personal, family, or household purpose.(3) This rule does not apply to: (a) a licensee with information about a person who obtains a product or service for a business, commercial, or agricultural purpose;(b) a person selling or providing: (i) a manufacturer warranty;(ii) a manufacturer service contract paid for with consideration, in addition to the consideration paid for the product; or(iii) a service contract for the repair or maintenance of goods, including motor vehicles, that is paid for with consideration in addition to consideration paid for the product;(c) a financial institution;(d) a securities broker or dealer; or(e) a credit union that engages in an activity or function that does not require a license from the commissioner.Utah Admin. Code R590-206-2
Amended by Utah State Bulletin Number 2017-15, effective 7/11/2017Adopted by Utah State Bulletin Number 2023-23, effective 11/21/2023