12 CFR 222.32 - Sharing medical information with affiliates.

prev | next
§ 222.32 Sharing medical information with affiliates.

(a)Scope. This section applies to banks that are members of the Federal Reserve System (other than national banks) and their respective operating subsidiaries, branches and agencies of foreign banks (other than Federal branches, Federal Agencies, and insured State branches of foreign banks), commercial lending companies owned or controlled by foreign banks, organizations operating under section 25 or 25A of the Federal Reserve Act ( 12 U.S.C. 601et seq., and 611 et seq.).

(b)In general. The exclusions from the term “consumer report” in section 603(d)(2) of the Act that allow the sharing of information with affiliates do not apply to a person described in paragraph (a) of this section if that person communicates to an affiliate:

(1) Medical information;

(2) An individualized list or description based on the payment transactions of the consumer for medical products or services; or

(3) An aggregate list of identified consumers based on payment transactions for medical products or services.

(c)Exceptions. A person described in paragraph (a) of this section may rely on the exclusions from the term “consumer report” in section 603(d)(2) of the Act to communicate the information in paragraph (b) of this section to an affiliate:

(1) In connection with the business of insurance or annuities (including the activities described in section 18B of the model Privacy of Consumer Financial and Health Information Regulation issued by the National Association of Insurance Commissioners, as in effect on January 1, 2003);

(2) For any purpose permitted without authorization under the regulations promulgated by the Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA);

(3) For any purpose referred to in section 1179 of HIPAA;

(4) For any purpose described in section 502(e) of the Gramm-Leach-Bliley Act;

(5) In connection with a determination of the consumer's eligibility, or continued eligibility, for credit consistent with § 222.30 of this part; or

(6) As otherwise permitted by order of the Board.

This is a list of United States Code sections, Statutes at Large, Public Laws, and Presidential Documents, which provide rulemaking authority for this CFR Part.

This list is taken from the Parallel Table of Authorities and Rules provided by GPO [Government Printing Office].

It is not guaranteed to be accurate or up-to-date, though we do refresh the database weekly. More limitations on accuracy are described at the GPO site.

United States Code
Statutes at Large

Title 12 published on 09-Jun-2018 03:57

The following are ALL rules, proposed rules, and notices (chronologically) published in the Federal Register relating to 12 CFR Part 222 after this date.

  • 2014-05-29; vol. 79 # 103 - Thursday, May 29, 2014
    1. 79 FR 30709 - Identity Theft Red Flags (Regulation V)
      GPO FDSys XML | Text
      Final rule.
      The final rule is effective June 30, 2014.
      12 CFR Part 222