Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk7 min

Beyond the Vault: Who’s Responsible for What Banking Sites Share?

Bank data sharing is governed by a split of duties: the bank's privacy notice and safeguards, vendor contracts and reuse limits, and regulators. Here is how the opt-out works and where its limits lie.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Responsibility for what a bank shares is divided among several parties. The bank owns the privacy notice, the opt-out right where federal law provides one, and the duty to protect your information. A vendor that receives data is bound by its contract and by limits on reuse and redisclosure, and the bank remains responsible for making sure that vendor protects the data it holds. Whether you can stop a particular transfer depends less on what the bank calls it and more on why the information moves and who receives it.

This article covers the US federal framework for consumer financial information, centered on the Gramm-Leach-Bliley Act (GLBA). It does not cover every state law, which can add requirements, or the notice of any particular bank.

As an Amazon Associate I earn from qualifying purchases.

What a bank’s privacy notice tells you

Banks, savings associations, credit unions, and several nonbank financial businesses must give consumers a privacy notice under GLBA and its implementing rules. The notice is the first document to read because it states the practices the institution says it follows. The Federal Trade Commission’s guidance says a notice should identify:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • the categories of information the institution collects and discloses;
  • the categories of affiliates and nonaffiliated companies that receive that information;
  • the exceptions that apply to the sharing it describes;
  • any opt-out rights and how to exercise them;
  • the institution’s security practices.

A listed category tells you the bank has disclosed that type of sharing. It does not mean every listed category is an unrestricted sale, and it does not tell you what a particular vendor did with your records. Sharing and selling are different legal concepts, and a notice can describe sharing that is limited by contract, by law, or by an exception.

#1 Best Overall
Ailun Privacy Screen Protector iPhone 17e/16e/14/13/13 Pro, 2 Pack | 6.1 Inch, Tempered Glass, Anti Spy Private, Case Friendly, Not for iPhone 16 6.1 Inch
  • [2 Pack] This product includes 2 pack privacy screen protectors.WORKS FOR iPhone 17e/16e/14/iPhone 13/13 Pro 6.1 Inch tempered glass screen protector.Featuring maximum protection from scratches, scrapes, and bumps.[Not for iPhone 16 6.1 inch, iPhone 13 mini 5.4 inch, iPhone 13 Pro Max/iPhone 14 Pro Max/iPhone 14 Plus 6.7 inch, iPhone 14 Pro 6.1 inch]
  • Specialty: to enhance compatibility with most cases, the Tempered glass does not cover the entire screen. HD ultra-clear rounded glass for iPhone 17e/16e/14/iPhone 13/13 Pro is 99.99% touch-screen accurate.
  • 99.99% High-definition clear hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints.
  • High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
  • Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.

Who is responsible for what

Responsibility is spread across the bank, its recipients, and the regulators that oversee them. The table below separates the main duties and the limits that apply to each.

Party Main duties Limits and what they mean for you
Bank or other covered financial institution Give an accurate privacy notice; offer an opt-out before covered disclosures to nonaffiliated third parties, outside the exceptions; safeguard customer information. The notice must describe current practices. The opt-out does not stop operational transfers that fall under an exception.
Nonaffiliated service provider Use and redisclose information only as the contract and the rules permit. Its duties come mainly from the contract and Regulation P’s limits on reuse and redisclosure. It does not automatically carry the bank’s full notice obligations.
Affiliate of the bank Receives information subject to affiliate-sharing rules. GLBA does not by itself require an opt-out notice for disclosures only to affiliates. The Fair Credit Reporting Act may impose a separate opt-out for certain affiliate sharing.
Federal regulators The CFPB holds rulemaking authority for much of Regulation P. The FTC retains enforcement authority for relevant GLBA provisions and enforces the Safeguards Rule for institutions under its jurisdiction. Which agency oversees your bank depends on the type of institution.
Authorized third party in consumer-directed data access Obligations on how it collects, uses, and retains data it receives with your authorization under the CFPB’s Section 1033 rule. This is separate from the bank’s privacy notice. See the Section 1033 section below.

When you can opt out, and when you cannot

Disclosures that trigger an opt-out

For covered disclosures of nonpublic personal information to nonaffiliated third parties, an institution generally must provide an opt-out notice and a reasonable way and opportunity to opt out before the disclosure happens. FTC guidance gives 30 days as an example of a reasonable opportunity. That is an illustration, not a fixed deadline that applies in every case, so check the notice for the method and timing it actually offers. An opt-out direction generally stays in effect until you cancel it, subject to the rule’s terms.

Exceptions that do not depend on your opt-out

FTC guidance describes several categories of disclosure that fall outside the opt-out requirement:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
SMARTDEVIL 2 Pack Privacy Screen Protector for iPhone 17 Pro Max, Anti-Spy | Military-Grade Shatterproof Protection, Tempered Glass Film , 9H Hardness, Fast & Easy Installation, Case Friendly Design
  • Perfect Fit for iPhone 17 Pro Max:Engineered exclusively for iPhone 17 Pro Max with seamless edge-to-edge coverage, ensuring precise alignment and reliable full-screen protection.
  • Advanced Privacy Protection:Features a 28° privacy filter with smooth 2.5D curved edges, preventing side glances in public. Your screen remains visible only to you—ideal for commuting, traveling, and crowded environments.
  • Effortless Installation:Equipped with an auto dust-elimination tool that delivers a fast, accurate, and bubble-free application, keeping your screen perfectly clear with minimal effort.
  • Military-Grade Protection:Made of nano-reinforced 9H tempered glass, SGS certified. Provides 5X stronger scratch resistance and proven durability, withstanding thousands of pressure and impact tests.
  • Smudge & Fingerprint Resistant:Hydrophobic and oleophobic coating repels fingerprints, sweat, and oil—ensuring your screen stays clean, clear, and smooth to the touch.
  • disclosures needed to process or administer a financial transaction you requested or authorized;
  • disclosures for fraud prevention;
  • disclosures to comply with legal process or with the law;
  • disclosures to service providers and under joint-marketing arrangements that meet the conditions described in the next section.

In practice, opting out will not stop your bank from processing a payment you authorized, running fraud checks on your account, or responding to a court order. Any opt-out you make applies to the categories it can legally reach.

Affiliate sharing follows a different path

Affiliate sharing and nonaffiliate sharing are treated differently. If your bank’s notice describes sharing with affiliated companies, look for that section separately, because the opt-out rules that apply to nonaffiliates do not automatically govern it.

Vendors and service providers

A bank may give information to a nonaffiliated company that performs services for it or functions on its behalf without the opt-out requirements applying. Regulation P, at 12 CFR 1016.13, sets the condition with this sentence:

Rank #3
Ailun Privacy Screen Protector for iPhone 16 / iPhone 15 / iPhone 15 Pro | 3 Pack, 6.1 inch, Tempered Glass, Anti Spy Private, Anti-Scratch, Case Friendly
  • [3 Pack] This product includes 3 pack privacy screen protectors.WORKS FOR iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch tempered glass screen protector. Due to the rounded edge design of the iPhone 16/iPhone 15/iPhone 15 Pro and to enhance compatibility with most cases,the tempered glass screen protectors will be slightly smaller than the phone screen.[Not for iPhone 16e 6.1 inch, iPhone 15 Plus/iPhone 15 Pro Max/iPhone 16 Plus 6.7 inch,iPhone 16 Pro 6.3 inch,iPhone 16 Pro Max 6.9 inch]
  • Specialty: HD rounded glass for iPhone 16/iPhone 15/iPhone 15 Pro 6.1 Inch is 99.99% touch-screen accurate.
  • 99.99% High-definition hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints. Featuring maximum protection from scratches, scrapes, and bumps.
  • High Privacy: Keeps your personal, private, and sensitive information hidden from strangers,screen is only visible to persons directly in front of screen.Good choose when you are in the bus,elevator,metro or other public occasions.(Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
  • Online video installation instruction: Easiest Installation - removing dust and aligning it properly before actual installation,enjoy your screen as if it wasn't there.

“The opt out requirements in §§ 1016.7 and 1016.10 of this part do not apply when you provide nonpublic personal information to a nonaffiliated third party to perform services for you or functions on your behalf, if you:”

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The two conditions that follow are that the bank has given the initial notice the rule requires, and that it has a contract limiting the recipient’s use and disclosure of the information to the purposes for which it was disclosed. Regulation P also contemplates written joint-marketing agreements that carry use limits.

Two points follow. First, using a vendor does not by itself mean an improper disclosure. Second, calling a company a service provider does not mean it can use your information without restriction. The contract defines the permitted role, and the reuse and redisclosure limits in Regulation P apply to what the recipient may do next. A recipient is not necessarily governed by the same full set of obligations as the bank that disclosed the information, so read the contract’s terms, not the label, to understand the limits.

Rank #4
Ailun Privacy Screen Protector+Camera Lens Protector for iPhone 16, 3+3Pack | 6.1 Inch, Tempered Glass Film, Installation Frame, Anti Spy Private, Case Friendly
  • [3+3 Pack] This product includes 3 pack privacy screen protectors and 3 pack camera lens protectors with Installation Frame. Works For iPhone 16 [6.1 inch] tempered glass screen protector and camera lens protector. Featuring maximum protection from scratches, scrapes, and bumps. [Not for iPhone 16e 6.1 inch, iPhone 16 Pro 6.3 inch, iPhone 16 Pro Max 6.9 inch, iPhone 16 Plus 6.7 inch]
  • Night shooting function: specially designed iPhone 16 6.1 Inch camera lens protective film. The camera lens protector adopts the new technology of "seamless" integration of augmented reality, with light transmittance and night shooting function, without the need to design the flash hole position, when the flash is turned on at night, the original quality of photos and videos can be restored.
  • High Privacy: Keeps your personal, private, and sensitive information hidden from strangers, screen is only visible to persons directly in front of screen. Good choose when you are in the bus,elevator,metro or other public occasions. (Note: Due to this privacy cover will darken the image to prevent the peeking eyes near you, you might need to turn your device display brightness up a bit when use it.)
  • Easiest Installation - Please watch our installation video tutorial before installation. Removing dust and aligning it properly with the help of the included installation frame before actual installation, enjoy your screen as if it wasn't there.
  • 99.99% High-definition clear hydrophobic and oleophobic screen coating protects against sweat and oil residue from fingerprints, and enhance the visibility of the screen.

Security duties do not stop at the bank’s door

A privacy notice and a safeguards duty are separate obligations. The FTC’s Safeguards Rule summary states: “In addition to developing their own safeguards, companies covered by the Rule are responsible for taking steps to ensure that their affiliates and service providers safeguard customer information in their care.”

Handing work to a vendor therefore does not end a covered institution’s security responsibility for the information it sends. The Safeguards Rule applies to financial institutions under FTC jurisdiction. Banks overseen by federal banking regulators may be subject to safeguards standards set by those agencies instead, so the exact rule for your bank depends on who regulates it.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Which regulator applies to your bank

GLBA’s privacy rulemaking is shared among federal agencies. The CFPB holds rulemaking authority for much of Regulation P, and the FTC retains enforcement authority for relevant GLBA provisions. Regulators with authority over a specific institution type can also apply their own standards, which is why the same practice may be governed by different agencies at different banks. If you are unsure which agency oversees your institution, the bank’s notice or its website usually identifies its primary federal regulator.

Best Value
Sale
UltraGlass TOP 9H+ Armor for iPhone 17 Pro Max Privacy Screen Protector 6.9 | NO.1 Military Grade Shatterproof, Privacy Screen 17 Pro Max Tempered Glass 17 ProMax, 100% Anti-Spy, Longest Durable, 2 Packs
  • [Industry-Leading 100% Anti-Spy Privacy Protection] Designed for iPhone 17 Pro Max. Larger iPhone screens are easier for others to glance at, so UltraGlass uses patented, SEGI-certified 25° Blackout-3 optical technology to help block side views and keep emails, banking apps, and private content visible only to you—while keeping the front view HD-clear and comfortable through hours of scrolling and streaming.
  • [Unbreakable TOP 9H+ Glass, the Excellent 2nd Screen for Your iPhone] Boasting unparalleled shatter resistance and durability. And the core excellence is the top 9H+ tempered glass material, which is widely applied in aerospace and military fields for its ① Shatter-proof ② Scratch & Wear Resistance ③ Durability that is 7-8 times higher than other materials. Thus, UltraGlass builds a second tough screen for your iPhone 17 Pro Max.
  • [Industry NO.1 Military-Grade Shatterproof] Authorized by the International Military Standard with 50+ rigorous engineering tests of 220 lbs impact, 8,000+ drop tests, 25,000+ scratch tests, etc., its strength, toughness and durability perform NO.1 among all glass. By especially breaking the industry's record with a 12ft drop, the iPhone 17 Pro Max screen protector is ensured to be unbreakable from its surface to every edge and corner.
  • [Invisible Armor, 1:1 Full Covers the iPhone's Screen] Mimicking the iPhone's original screen design, it uses a 1:1 3D curved reinforced black edge that wraps around every curve — case friendly — while securing even the most vulnerable edges. Seamlessly blending with the iPhone 17 ProMax screen, it's virtually invisible and feels like the original screen while offering enhanced full-screen protection.
  • [0 Bubbles + 0 Dust + 0 Misaligned =100% Successful Installation] Includes everything you need with pioneering automatic positioning, dust removal, and absorption technology, making the installation just effortlessly easy in seconds. No bubbles, no troubles—transforming beginners into experts!

Consumer-directed data access under Section 1033

Section 1033 of the Consumer Financial Protection Act concerns a different question from a bank’s general privacy notice. It addresses data a consumer asks to receive, or asks to have shared with an authorized third party. The CFPB’s personal financial data rights rule, with a final rule dated October 22, 2024, requires data providers to make covered data available electronically, subject to the rule’s requirements, and places obligations on authorized third parties concerning how they collect, use, and retain that data.

The codified text at 12 CFR 1033.201 says a data provider must make covered data in its control or possession available to a consumer and to an authorized third party, upon request, in usable electronic form.

Status check: On August 22, 2025, the CFPB announced an advance notice of proposed rulemaking asking for input on reconsidering parts of the rule, including who may act as a consumer’s representative, fees, and data-security and data-privacy risks. An advance notice is an early step, and it does not by itself settle what the final rule requires. Court orders, amendments, and compliance dates may have changed since then, so check the CFPB’s personal financial data rights page before relying on any deadline or on whether a given provision is in effect.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When you connect a budgeting or payments app to your bank account, that is a consumer-directed decision. Review those connections in the app and with your bank rather than assuming the opt-out in the bank’s general privacy notice controls them.

What to do with this information

  1. Find the current privacy notice. Banks commonly link it from their website or app, and you can also request a copy in writing. Confirm the notice’s date, since older versions may describe different practices.
  2. Sort each type of sharing by recipient and purpose. Note whether the recipient is an affiliate, a nonaffiliated third party, or a service provider, and whether the purpose is transaction processing, fraud prevention, legal compliance, or marketing.
  3. Check whether the notice offers an opt-out for that category. If it does, use the channel the notice lists, whether a phone line, mailed form, or online form, and keep a record of the date you opted out.
  4. Expect exceptions for operational sharing. Transaction processing, fraud prevention, and legal compliance generally continue regardless of an opt-out.
  5. Review any third-party apps connected to your account and remove those you no longer use.
  6. If the notice does not match what happens, raise the discrepancy with the bank in writing. If it is not resolved, file a complaint with the CFPB or the FTC.

The details for your account depend on your institution’s charter and regulator, the state where you live, and the notice the bank actually issued. The steps above show where to look and which category of rule each practice falls under.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.