Reg P 1016.4-1016.6 — Initial and annual privacy notices

Requirement

Customers receive a clear and conspicuous privacy notice when the customer relationship begins and annually for as long as it continues — unless the annual-notice exception applies (sharing only within the exceptions and no change to policies) — describing the categories of nonpublic personal information collected and disclosed, the categories of recipients, information-sharing practices, the right to opt out, and how the information is protected.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.