The CFPB finalized its annual privacy notices rule last week, leaving it unchanged from its May proposed rule, other than some technical and clarifying revisions. The new rule creates an alternative delivery method for the privacy disclosure required every year under Regulation P (the implementation regulation of the Gramm-Leach-Bliley Act), which financial institutions will be able to use under certain circumstances. The new rule applies to both banks and those nonbanks that are within the CFPB’s jurisdiction under the GLBA. More specifically, the rule applies to “financial institutions,” as defined in Reg P. That includes banks, credit unions, mortgage companies, mortgage brokers and debt buyers. Under the CFPB’s new rule, financial institutions will be able to post privacy notices online ...