{"page":"/blog/glba-joint-marketing-exception","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Term","Source","Status"],"rows":[["Recipient may disclose or use the data only to carry out the stated purpose (plus ordinary-course uses under §§ 1016.14 and 1016.15)","§ 1016.13(a)(1)(ii)","Law"],["Recipient maintains the confidentiality of the data","15 U.S.C. § 6802(b)(2)","Law"],["For a joint marketer, use limited to carrying out the joint marketing","§ 1016.13(a)(2)","Law (the rule's example)"],["Written contract under which the parties jointly offer, endorse or sponsor a financial product","§ 1016.13(c)","Law, for the joint agreement route"],["Service provider must implement and maintain safeguards, by contract","16 CFR § 314.4(f)(2)","Law for institutions under the FTC Safeguards Rule; banks follow interagency guidelines instead"],["Named data fields, campaign scope, retention period and deletion at the end","Practitioner drafting","Practice"],["No merging with other clients' data; no lookalike or model building for others","Practitioner drafting","Practice"],["Subcontractor flow-down, audit rights, breach notice timeline","Practitioner drafting","Practice"]],"sourceUrls":[["https://www.law.cornell.edu/cfr/text/12/1016.13"],["https://www.law.cornell.edu/uscode/text/15/6802"],["https://www.law.cornell.edu/cfr/text/12/1016.13"],["https://www.law.cornell.edu/cfr/text/12/1016.13"],["https://www.law.cornell.edu/cfr/text/16/314.4"],[],[],[]]}