privacy notice and disclosure regulation

The current notice and disclosure framework creates compliance fragmentation for financial institutions operating across multiple state jurisdictions; CalPrivacy's preliminary review should establish whether standardized baseline requirements would reduce duplicative notice obligations while maintaining consumer transparency protections.

Employee data regulations in the financial services sector require clarification on scope and applicability—specifically whether CalPrivacy intends to establish separate standards for workforce data versus customer data, given that financial firms face distinct obligations under GLBA, FCRA, and state laws.

Third-party service provider relationships in financial services depend on clear disclosure boundaries; the preliminary review should address whether notice requirements apply to vendor data processing activities and how CalPrivacy's potential standards would interact with existing contractual data-handling frameworks.