Sec. A-16. 32 MRSA §10206 is enacted to read:

§10206.__Disclosure of nonpublic personal information to

nonaffiliated 3rd party

1. Opt in; disclosure to nonaffiliated 3rd party.__A person subject to this chapter may not disclose, directly or through an affiliate, to a nonaffiliated 3rd party any nonpublic personal information unless the person to whom the information pertains has affirmatively consented to the disclosure in writing and has not withdrawn that consent.__This subsection does not prohibit the disclosure of nonpublic personal information by a person subject to this chapter to a nonaffiliated 3rd party to the extent such a disclosure is permitted by the federal Gramm-Leach-Bliley Act, 15 United States Code, Section 6802, subsection b, paragraph 2 and subsection e.

2. Use of terms.__As used in this section, unless the context otherwise indicates, the terms "affiliate," "nonaffiliated 3rd party" and "nonpublic personal information" have the same meanings as in the federal Gramm-Leach-Bliley Act, 15 United States Code, Section 6801 et seq. (1999).

Sec. A-17. 32 MRSA §10313, sub-§1, śL, as enacted by PL 2001, c. 262, Pt. D, §3, is amended to read:

L. Has failed to comply with the requirements of section 10206 or the privacy provisions of the federal Gramm- Leach-Bliley Act, 15 United States Code, Section 6801 et seq. (1999) and the implementing Regulation S-P, federal Privacy of Consumer Financial Information, 17 Code of Federal Regulations, Part 248 (2001) adopted by the United States Securities and Exchange Commission. This paragraph is not intended to permit the release of health care information except as permitted by Title 22, section 1711- C or Title 24-A, chapter 24.

Sec. A-18. 32 MRSA §11018, as enacted by PL 2001, c. 262, Pt. E, §4, is repealed and the following enacted in its place:

§11018.__Privacy of consumer financial information

1.__Compliance with federal law and regulations.__Except as provided in subsection 2 with respect to disclosure of nonpublic personal information to nonaffiliated 3rd parties, a collection agency or repossession company shall comply with the provisions of the federal Gramm-Leach-Bliley Act, 15 United States Code,