Can I use third-party customer service tools that collect personal information in Alabama? What are the requirements?

Yes, you can use third-party customer service tools that collect personal information in Alabama, but you must ensure that the tool is covered by the licensee’s contractual agreement with the third party and that the licensee has implemented a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of customer information ^{[1.1][2.1][2.2][1.4]}. Additionally, a licensee must comply with the opt-out requirements for disclosure of nonpublic personal financial information to nonaffiliated third parties ^[1.5].

Therefore, if a third-party customer service tool collects personal information, a licensee must ensure that the tool is covered by the licensee’s contractual agreement with the third party, implement a comprehensive written information security program, and comply with the opt-out requirements for disclosure of nonpublic personal financial information to nonaffiliated third parties ^{[1.1][2.1][2.2][1.4][1.5]}.

Source(s):

• [1.1] Exception To Opt Out Requirements For Disclosure Of Nonpublic Personal Financial Information For Service Providers And Joint Marketing
• [2.1] Oversee Service Provider Arrangements
• [2.2] Information Security Program
• [1.4] Limits On Redisclosure And Reuse Of Nonpublic Personal Financial Information
• [1.5] Limits On Disclosure Of Nonpublic Personal Financial Information To Nonaffiliated Third Parties

Jurisdiction

Alabama

• Privacy