Consumer vs. customer under Regulation P

Regulation P implements parts of the Gramm-Leach-Bliley Act’s financial privacy framework. Its definitions distinguish a one-time consumer interaction from an ongoing customer relationship. A mortgage applicant can be a consumer even when the loan is not made; that alone does not answer whether the applicant is also a customer.

Consumer: a broader category

The general definition covers an individual who obtains or has obtained a financial product or service for personal, family, or household purposes, including the person’s legal representative. Regulation P gives examples that can include an individual who applies for personal-purpose credit even if the institution does not extend it, and a person who provides nonpublic personal information while seeking covered financial services. A consumer need not have an account that stays open.

Customer: a continuing relationship

A customer is a consumer with a customer relationship—a continuing relationship under which the institution provides one or more financial products or services. For a mortgage lender or servicer, the facts and the institution’s role matter. A borrower whose loan the institution services may have a continuing relationship; a person who merely shops for a loan may be a consumer without becoming a customer. Apply the regulation’s specific examples rather than relying on everyday meanings of the words.

Why the distinction matters

Regulation P requires an initial privacy notice in specified circumstances and includes ongoing-notice rules for customers, with exceptions and delivery conditions. The institution must also evaluate limits on disclosure of nonpublic personal information, service-provider exceptions, and opt-out rights where applicable. Calling someone a consumer does not by itself determine every notice or disclosure obligation; analyze the exact transaction and exception.

1. Identify the individual and the personal, family, or household financial service involved.
2. Ask whether the institution has established an ongoing relationship or only a transaction or inquiry.
3. Check whether a special definition or example in §1016.3 applies.
4. Then analyze the notice, disclosure, and exception rule in the relevant section.
5. Do not treat every consumer as a customer or assume a declined application is outside the consumer definition.

Keep the relationship test separate from privacy rights. Consumer is the broader status; customer is the consumer who has the continuing relationship described by the rule.