Under the Gramm-Leach-Bliley Act, what does NPI NOT include?

Under the Gramm-Leach-Bliley Act (GLBA), Non-Public Personal Information (NPI) is defined as personal information obtained by financial institutions through their financial activities with customers. NPI is intended to protect consumers' personal and financial information from unauthorized access and disclosure.

Public records are explicitly excluded from the definition of NPI. This is because public records are available to anyone and do not contain sensitive personal information that consumers expect to remain confidential. On the other hand, customer identifiers, social security numbers, and financial account information are all classified as NPI because they are not typically available to the public and require protection under GLBA.

This understanding underscores the act's focus on safeguarding specific personal information that individuals do not wish to have publicly accessible, thereby prioritizing privacy and data security in financial services.