Federal Deposit Insurance Corporation
550 17th Street NW, Washington, DC 20429 Division of Supervision
FAIR CREDIT REPORTING ACT
FIL-26-2001
March 27, 2001
TO: CHIEF EXECUTIVE OFFICER AND COMPLIANCE OFFICER
SUBJECT: Guidance on the Timing and Preparation of Privacy Notices to Conform to Fair
Credit Reporting Act Requirements
The attached Federal Register notice provides an update on the status of an interagency
rulemaking regarding the sharing of information with affiliates under provisions of the Fair Credit
Reporting Act (FCRA). In particular, the notice advises that the final FCRA rule will not apply to
Gramm-Leach-Bliley Act (GLBA) privacy notices that a financial institution sends prior to
January 1, 2002, or the effective date of a final FCRA rule, whichever is later. Accordingly,
financial institutions are instructed to prepare privacy notices in accordance with the GLBA
privacy regulation and the FCRA by the previously announced deadline of July 1, 2001, without
delaying compliance until publication of the final FCRA rule.
On October 1, 2000, the FDIC and the other federal regulatory agencies published for comment
proposed regulations implementing provisions of the FCRA. The FCRA permits financial
institutions to share information about consumers with their affiliates without incurring the
obligations of consumer reporting agencies if consumers are given an opportunity to "opt out."
The proposed regulations addressed the form, content and means of delivery of FCRA opt-out
notices.
The banking agencies received approximately 500 comments on the proposed regulations.
Many of the comments asked how the FCRA rulemaking might affect compliance with the final
regulation that implements the privacy provisions of the GLBA, particularly the July 1, 2001,
compliance deadline for delivering required privacy notices. In addition, many financial
institutions expressed concerns that they might be required to revise and reissue their privacy
notices if the FCRA opt-out notices they included in their privacy notices are inconsistent with
final FCRA regulations.
As part of the final FCRA rulemaking process, the banking agencies will carefully consider and
address requests that the final FCRA rule contain an effective date that gives financial
institutions adequate time to comply with the final FCRA rule and the privacy regulations.
Specifically, the final FCRA rule will not require financial institutions to revise privacy notices,
prepared in reliance on existing FCRA law and interpretation, sent to consumers prior to
January 1, 2002, or the effective date of the final FCRA regulation, whichever is later.
For more information, please contact Ken Baebel (202-942-3086), Assistant Director -
Compliance Policy, FDIC Division of Compliance and Consumer Affairs, or Ann Johnson (202-
898-3573) or Nancy Schucker Recchia (202-898-8885), Counsels in the FDIC Legal Division.
Stephen M. Cross
DirectorInactive
550 17th Street NW, Washington, DC 20429 Division of Supervision
FAIR CREDIT REPORTING ACT
FIL-26-2001
March 27, 2001
TO: CHIEF EXECUTIVE OFFICER AND COMPLIANCE OFFICER
SUBJECT: Guidance on the Timing and Preparation of Privacy Notices to Conform to Fair
Credit Reporting Act Requirements
The attached Federal Register notice provides an update on the status of an interagency
rulemaking regarding the sharing of information with affiliates under provisions of the Fair Credit
Reporting Act (FCRA). In particular, the notice advises that the final FCRA rule will not apply to
Gramm-Leach-Bliley Act (GLBA) privacy notices that a financial institution sends prior to
January 1, 2002, or the effective date of a final FCRA rule, whichever is later. Accordingly,
financial institutions are instructed to prepare privacy notices in accordance with the GLBA
privacy regulation and the FCRA by the previously announced deadline of July 1, 2001, without
delaying compliance until publication of the final FCRA rule.
On October 1, 2000, the FDIC and the other federal regulatory agencies published for comment
proposed regulations implementing provisions of the FCRA. The FCRA permits financial
institutions to share information about consumers with their affiliates without incurring the
obligations of consumer reporting agencies if consumers are given an opportunity to "opt out."
The proposed regulations addressed the form, content and means of delivery of FCRA opt-out
notices.
The banking agencies received approximately 500 comments on the proposed regulations.
Many of the comments asked how the FCRA rulemaking might affect compliance with the final
regulation that implements the privacy provisions of the GLBA, particularly the July 1, 2001,
compliance deadline for delivering required privacy notices. In addition, many financial
institutions expressed concerns that they might be required to revise and reissue their privacy
notices if the FCRA opt-out notices they included in their privacy notices are inconsistent with
final FCRA regulations.
As part of the final FCRA rulemaking process, the banking agencies will carefully consider and
address requests that the final FCRA rule contain an effective date that gives financial
institutions adequate time to comply with the final FCRA rule and the privacy regulations.
Specifically, the final FCRA rule will not require financial institutions to revise privacy notices,
prepared in reliance on existing FCRA law and interpretation, sent to consumers prior to
January 1, 2002, or the effective date of the final FCRA regulation, whichever is later.
For more information, please contact Ken Baebel (202-942-3086), Assistant Director -
Compliance Policy, FDIC Division of Compliance and Consumer Affairs, or Ann Johnson (202-
898-3573) or Nancy Schucker Recchia (202-898-8885), Counsels in the FDIC Legal Division.
Stephen M. Cross
DirectorInactive
Attachment: March 27, 2001, Federal Register, pages 16624-16625
HTML or PDF (35 KB File - PDF Help or Hard Copy)
Distribution: FDIC-Supervised Banks (Commercial and Savings)
NOTE: Paper copies of FDIC financial institution letters may be obtained through the FDIC's
Public Information Center, 801 17th Street, NW, Room 100, Washington, DC 20434 (800-276-
6003 or (703) 562-2200).Inactive
HTML or PDF (35 KB File - PDF Help or Hard Copy)
Distribution: FDIC-Supervised Banks (Commercial and Savings)
NOTE: Paper copies of FDIC financial institution letters may be obtained through the FDIC's
Public Information Center, 801 17th Street, NW, Room 100, Washington, DC 20434 (800-276-
6003 or (703) 562-2200).Inactive