CFR > Title 12 - Banks and Banking > CHAPTER III—FEDERAL DEPOSIT INSURANCE CORPORATION > SUBCHAPTER B—REGULATIONS AND STATEMENTS OF GENERAL POLICY (parts 323 to 371) > PART 334—FAIR CREDIT REPORTING > SUBPART D—Medical Information (§334.30 to §334.32) > 334.32—Sharing medical information with affiliates.

334.32—Sharing medical information with affiliates.

(a) Scope. This section applies to State banks insured by the FDIC (other than members of the Federal Reserve System) and insured State branches of foreign banks.
(b) In general. The exclusions from the term “consumer report” in section 603(d)(2) of the Act that allow the sharing of information with affiliates do not apply if a person described in paragraph (a) of this section communicates to an affiliate—
(1) Medical information;
(2) An individualized list or description based on the payment transactions of the consumer for medical products or services; or
(3) An aggregate list of identified consumers based on payment transactions for medical products or services.
(c) Exceptions. A person described in paragraph (a) of this section may rely on the exclusions from the term “consumer report” in section 603(d)(2) of the Act to communicate the information in paragraph (b) of this section to an affiliate—
(1) In connection with the business of insurance or annuities (including the activities described in section 18B of the model Privacy of Consumer Financial and Health Information Regulation issued by the National Association of Insurance Commissioners, as in effect on January 1, 2003);
(2) For any purpose permitted without authorization under the regulations promulgated by the Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act of 1996 (HIPAA);
(3) For any purpose referred to in section 1179 of HIPAA;
(4) For any purpose described in section 502(e) of the Gramm-Leach-Bliley Act;
(5) In connection with a determination of the consumer's eligibility, or continued eligibility, for credit consistent with § 334.30; or
(6) As otherwise permitted by order of the FDIC.