On May 24, 2000, the Federal Trade Commission has issued a final rule governing a financial institution's ability to disclose nonpublic information about consumers. The Commission considers educational institutions to be financial institutions for the purposes of this rule. These regulations were required by the Gramm-Leach-Bliley Act which was signed November 12, 1999. The FTC rulings are to go into effect on November 13, 2000 and compliance is required by July 1, 2001.

In brief, the FTC ruling

"...limits the instances in which a financial institution may disclose nonpublic personal information about a consumer to nonaffiliated third parties, and requires a financial institution to disclose to all of its customers the institution's privacy policies and practices with respect to information sharing with both affiliates and nonaffiliated third parties."

These rules are in addition to any other rules an institution may be obligated to, which limit the disclosure of nonpublic personal information. The Fair Credit Reporting Act (FCRA) and the Family Educational Rights and Privacy Act Regulations (FERPA) are two such examples.

The Commission has determined that compliance with FERPA will satisfy the conditions for compliance with the Commission's ruling.

"...institutions of higher education that are complying with FERPA to protect the privacy of their student financial aid records will be deemed to be in compliance with the Commission's rule"

Additional information
The information presented here is a summary of the extensive FTC ruling. Additional Information can be found on the following web sites.

These recent privacy initiatives undertaken by the FTC may be of interest.