GLBA Checklist - AICPA

A statement that nonpublic personal information is disclosed to nonaffiliated parties? The consumer’s right to opt-out of those disclosures? A description by which the consumer can opt-out? Does the organization have a written information security program? Is it implemented? ................
................