Afterpay provides a separate U.S. Consumer Privacy Notice, which is a federally required disclosure under the Gramm-Leach-Bliley Act explaining how the company collects, uses, and shares your financial information and what opt-out rights you have.
This analysis describes what Afterpay's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The GLBA Consumer Privacy Notice is the federally mandated disclosure that governs your right to opt out of certain sharing of your nonpublic personal information with non-affiliated third parties, which is a legally meaningful protection distinct from the general privacy notice.
Interpretive note: The substantive content of the U.S. Consumer Privacy Notice section was not rendered in the provided document; the GLBA nature and opt-out rights are inferred from the regulatory context applicable to Afterpay as a financial services provider and the standard purpose of a GLBA consumer privacy notice.
The GLBA-required U.S. Consumer Privacy Notice gives you specific federal rights to limit how Afterpay shares your financial data with non-affiliated companies. Exercising the opt-out described in this notice is separate from and in addition to any state-law privacy rights you may have.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
Depending on where you live, you may have certain rights with respect to your personal information. These rights may include: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected i...
Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the rig...
Monitoring
Afterpay has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"U.S. Consumer Privacy Notice— Excerpt from Afterpay's Afterpay Privacy Policy
REGULATORY LANDSCAPE: The U.S. Consumer Privacy Notice is required under the GLBA Privacy Rule, which mandates that non-bank financial institutions provide customers with annual privacy notices disclosing their information sharing practices and a reasonable opportunity to opt out of sharing with non-affiliated third parties. The CFPB has supervisory and enforcement authority over GLBA compliance for entities subject to its jurisdiction. The FTC retains enforcement authority for entities outside CFPB's direct supervisory scope. GOVERNANCE EXPOSURE: Medium. The existence of a separate GLBA notice is required and expected for a financial services provider of Afterpay's type. Compliance exposure arises if the notice is not provided annually, if opt-out mechanisms are not functional, or if the notice fails to accurately describe all sharing categories as required. The CFPB's increased scrutiny of BNPL providers since 2022 creates heightened enforcement risk. JURISDICTION FLAGS: GLBA applies federally to all U.S. customers. California residents have additional CCPA opt-out rights that operate in parallel with GLBA opt-out rights, and the two frameworks have different scopes and mechanisms that must both be honored. CONTRACT AND VENDOR IMPLICATIONS: Non-affiliated third parties receiving shared financial data from Afterpay must be assessed against the categories disclosed in the GLBA notice. Any sharing not covered by the opt-out must fall within a GLBA exception, such as sharing for everyday business purposes or jointly offered products. COMPLIANCE CONSIDERATIONS: The annual delivery requirement for GLBA notices should be verified in practice, including the method of delivery and the adequacy of the opt-out mechanism and response process. The notice content should be audited for accuracy against actual sharing practices. The interaction between GLBA opt-out rights and state-law opt-out rights should be mapped to ensure both frameworks are honored consistently.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The GLBA Consumer Privacy Notice is the federally mandated disclosure that governs your right to opt out of certain sharing of your nonpublic personal information with non-affiliated third parties, which is a legally meaningful protection distinct from the general privacy notice.
The GLBA-required U.S. Consumer Privacy Notice gives you specific federal rights to limit how Afterpay shares your financial data with non-affiliated companies. Exercising the opt-out described in this notice is separate from and in addition to any state-law privacy rights you may have.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Afterpay.