|
|
|
|
|
|
|
|
||||||
|
|
|
|
|
|
||||||||
|
|
|
|
||||||||||
|
|
|
|
|
|||||||||
|
|
|
|
|
|||||||||
|
|
||||||||||||
|
|
||||||||||||
|
PRIVACY STATEMENT |
|
|
||||||||||
|
Respect of Right to Privacy of privacy they would expect. We will maintain standards to ensure their information is private and secure at all times. our customer’s personal information. Collection and Use of
Personal Information The collection of personal information is designed to assist the bank in providing our customers with the products and services they want and need. All personal information that is collected and stored by the bank is used for specific business purposes: to protect and administer our customer’s personal accounts and transactions, to comply with state and federal banking regulations, and to help the bank better understand their financial needs in order to design or improve our products and services. The purpose of this policy is to protect the privacy of our customer’s nonpublic personal information that is necessary to collect and maintain in order to provide them with a product or service and to ensure the information is held in a secure environment. Month of June 2001. Privacy notices will be given to all new customers no later than when the relationship is established. The bank may provide the initial notice within a reasonable time after the relationship is established if establishing the customer relationship is not at the customer’s election. Notices will be delivered annually after the initial delivery. In the event the bank would begin to share nonpublic personal information with a nonaffiliated third party a revised notice would be sent to all customers. Information contained in our privacy notice pertains to: 1. Categories of information collected. 2. Categories of information disclosed. 3. Categories of affiliates to whom we may disclose information. 4. Policies with respect to the treatment of former customer’s information. 5. Information disclosed to service providers. 6. Policies for protecting the security and confidentiality of information. 7. A statement that we make disclosures to other nonaffiliated third parties as permitted by law.
Information
Security Objectives It is the Policy of FIRST STATE BANK to identify reasonably foreseeable internal and external threats that could result in unauthorized disclosure, misuse, alteration, or destruction of customer information or customer information systems; assess the likelihood and potential damage of these threats, taking into consideration the sensitivity of customer information; assess the sufficiency of policies, procedures, customer information systems and other arrangements in place to control risks. It is the Policy of FIRST STATE BANK to maintain an information security program, which shall include controls that management determines to be practical and appropriate for each of the following:
authenticate and permit access only to authorized individuals and controls to prevent employees from providing customer information to unauthorized individuals who may seek to obtain this information through fraudulent means.
authorized individuals.
unauthorized individuals may have access.
security program.
or access to customer information.
systems.
gained access to customer information systems, including appropriate reports to regulatory and law enforcement agencies.
such as fire and water damage or technological failures. Management will ensure that all staff are trained in the requirements of the information security program. Internal and/or external auditors will periodically test the key controls, systems and procedures of the information security program and report to the board at least annually concerning these tests. Management will oversee service provider arrangements for compliance with all applicable provisions of the Gramm- Leach-Bliley (GLBA) Act and the provisions of this security program. Management will monitor, evaluate and adjust as appropriate the information security program in light of any relevant changes in technology, sensitivity of customer information, internal or external threats to information, changes in the bank’s business arrangements or changes to customer information systems. |
|
|
||||||||||
|
|
|
|||||||||||
|
|
|
|||||||||||
|
|
|
|||||||||||
|
|
|
|||||||||||
|
|
|
|||||||||||
|
|
|
|
||||||||||
|
||||||||||||
|
||||||||||||