Can I use third-party customer service tools that collect personal information in Oklahoma? What are the requirements?

Using Third-Party Customer Service Tools that Collect Personal Information in Oklahoma

Based on the provided context documents, there are several requirements to consider when using third-party customer service tools that collect personal information in Oklahoma.

Disclosure of Nonpublic Personal Health Information

If the third-party customer service tool collects nonpublic personal health information, the licensee must obtain authorization from the consumer or customer whose nonpublic personal health information is sought to be disclosed, as per OKAC 365:35-1-40.

Limits on Redisclosure and Reuse of Nonpublic Personal Financial Information

If the third-party customer service tool collects nonpublic personal financial information, the licensee must comply with the limits on redisclosure and reuse of nonpublic personal financial information, as per OKAC 365:35-1-21. The licensee may disclose the information to the affiliates of the financial institution from which the licensee received the information, to its affiliates, or to any other person if the disclosure would be lawful if made directly to that person by the financial institution from which the licensee received the information.

Limits on Disclosure of Nonpublic Personal Financial Information to Nonaffiliated Third Parties

If the third-party customer service tool collects nonpublic personal financial information, the licensee must comply with the limits on disclosure of nonpublic personal financial information to nonaffiliated third parties, as per OKAC 365:35-1-20. The licensee may not disclose any nonpublic personal financial information about a consumer to a nonaffiliated third party unless the licensee has provided to the consumer an initial notice, an opt-out notice, and a reasonable opportunity to opt-out of the disclosure.

Other Considerations

It is recommended to ensure that the confidentiality of customer information is maintained and that the information is used only for the provision of services to the electric utility or reseller, as per 17 OKST 710.4 and 17 OKST 710.6. Additionally, it is important to comply with the annual reporting requirements, as per OKAC 165:57-5-23 and OKAC 165:56-7-4.

Therefore, if third-party customer service tools are used to collect personal information, it is important to comply with the relevant regulations and ensure that the necessary authorizations and notices are provided to the consumers.

[OKAC 365:35-1-40][OKAC 365:35-1-21][OKAC 365:35-1-20][17 OKST 710.4][17 OKST 710.6][OKAC 165:57-5-23][OKAC 165:56-7-4]

Jurisdiction

Oklahoma

• Privacy