[§431:3A-203] Information to be included in privacy notices. (a) The initial, annual, and revised privacy notices that a licensee provides under sections 431:3A-201, 431:3A-202, and 431:3A-205 shall include the following information, in addition to any other information the licensee wishes to provide, that applies to the licensee and to the consumers to whom the licensee sends its privacy notice:
(b) If a licensee discloses nonpublic personal financial information under sections 431:3A-402 and 431:3A-403, the licensee is not required to list those exceptions in the initial or annual privacy notices required by sections 431:3A-201 and 431:3A-202. When describing the categories of parties to whom disclosure is made, the licensee shall state only that it makes disclosures to other affiliated or nonaffiliated third parties, as applicable, as permitted by law.
(c) A licensee may satisfy the initial notice requirements in sections 431:3A-201(a) and 431:3A-204(c) for a consumer who is not a customer by providing a short form initial notice at the same time the licensee delivers an opt out notice under section 431:3A-204. A short form initial notice shall:
The licensee shall deliver a short form initial notice in accordance with section 431:3A-206. The licensee shall not be required to deliver its privacy notice with its short form initial notice; provided that the licensee provides the consumer a reasonable means to obtain a privacy notice. If a consumer receives the licensee’s short form notice and requests a privacy notice, the licensee shall deliver a privacy notice under section 431:3A-206.
(d) The privacy notice may include: