Which of the following must be included in a privacy notice under the Gramm-Leach-Bliley Act?

The correct answer is rooted in the requirements set forth by the Gramm-Leach-Bliley Act (GLBA), which aims to protect consumers' personal financial information. A crucial aspect of the GLBA is its requirement for financial institutions to provide a clear privacy notice to their customers. This notice must include details about "with whom Non-Public Personal Information (NPI) is shared."

Understanding the importance of this requirement highlights the consumers' right to know how their private information is being handled. By informing them about the entities or third parties with whom their NPI is shared, consumers can make more informed decisions about their privacy and potentially opt-out of certain information sharing, if they choose to do so.

In contrast, while the other choices touch upon aspects of privacy and information management, they do not align with the explicit requirements for a privacy notice under the GLBA. Knowing how NPI is sold might be relevant for consumers, but it is not a mandated disclosure in the privacy notice. Public records shared and the legal framework governing NPI are important in context but do not fulfill the specific criteria necessary for inclusion in the privacy notice as stipulated by GLBA regulations. Thus, the focus on the sharing of NPI is what sets the correct answer apart as a