Customer Privacy

Privacy is a core Series 99 topic because operations teams handle customer information constantly. The exam expects familiarity with confidentiality, permitted and prohibited information sharing, disclosures to customers, OBO and NOBO treatment, and the Red Flags framework for identity-theft concerns. These are not abstract privacy-law questions. They are daily control questions about who may see what, when, and why.

The best exam answer usually protects the customer information first and asks whether disclosure or sharing is actually permitted. If a scenario suggests broad or casual access to private data, the privacy problem usually outranks workflow convenience.

Key Takeaways

• Operations staff routinely handle regulated customer information.
• Privacy rules govern both external disclosure and internal sharing.
• OBO and NOBO status matters for how beneficial-owner information may be used.
• Red Flags issues are part of account and identity-protection controls.

Sample Exam Question

An operations employee wants to share customer information with another internal group simply because it would make processing easier. What is the strongest Series 99 concern?

A. Internal sharing is always unrestricted if both groups work at the same firm
B. Customer information still must be handled within privacy and access-control limits
C. Privacy rules apply only to external disclosures to regulators
D. OBO and NOBO status affects only tax reporting

Answer: B. Series 99 treats privacy as both an external and internal control issue. Easier processing does not automatically justify broader information access.