Before providing any personal information to a third-party you should make sure that they are actually authorized to have that information.
Here are some guidelines to help you and your employees determine who is and who is not authorized to obtain personal information about your customers.
- Requests from your customers.
In general, customers are authorized to find out what information you keep about them.
- Requests from individuals connected with your customers.
- Requests from the government.
If you receive a request from your state or the federal government to obtain personal information about your customers, and your customers have not consented to the release of their data pursuant to such requests, consult your attorney.
- Requests from other people.