Fair Credit Reporting: 18.4.1.9 Limits on Sharing Account Number Information for Marketing Purposes
The only category of information that the GLBA protects from disclosure outright, without any action on the consumer’s part, is the highly potent information of account numbers and similar forms of access codes. Financial institutions are prohibited from disclosing these numbers or codes to any nonaffiliated third party for marketing use other than to a consumer reporting agency, even if the financial institution has given the consumer a conforming opt-out notice.218