N.M. Admin. Code § 13.1.3.20 - AUTHORIZATIONS

A. A valid authorization to disclose nonpublic personal information pursuant to 13.1.3.14 NMAC shall be in written or electronic form separate from that used for any other purpose and shall contain all of the following:

(1) The identity of the consumer or customer who is the subject of the nonpublic personal information;

(2) A specific description of the types of nonpublic personal information to be disclosed;

(3) Specific descriptions of the parties to whom the licensee discloses nonpublic personal information, the purpose of the disclosure and how the information will be used;

(4) The signature of the consumer or customer who is the subject of the nonpublic personal information or the individual who is legally empowered to grant authority and the date signed; and

(5) Notice of the length of time for which the authorization is valid and that the consumer or customer may revoke the authorization at any time and the procedure for making a revocation.

B. An authorization for the purposes of this rule shall specify a length of time for which the authorization shall remain valid, which in no event shall be for more than twenty-four (24) months.

C. A consumer or customer who is the subject of nonpublic personal information may revoke an authorization provided pursuant to this rule at any time, subject to the rights of an individual who acted in reliance on the authorization prior to notice of the revocation.

D. A licensee shall retain the authorization or a copy thereof in the record of the individual who is the subject of nonpublic personal information.

Notes

N.M. Admin. Code § 13.1.3.20

13.1.3.20 NMAC - N, 2-25-02