In which of the following scenarios is a mortgage loan originator (MLO) violating the consumer...

The Gramm-Leach-Bliley Act (GLBA) prohibits the disclosure of nonpublic personal information about consumers to third parties, except as permitted by law (e.g., for processing the loan). Discussing a consumer’s credit history in a public place where privacy cannot be ensured is a violation of GLBA privacy rules.

“Financial institutions must protect the confidentiality of consumer records and information. Discussing customer information in public or unsecured locations can violate privacy regulations.”

— GLBA Privacy Rule; FTC Compliance Guidelines

Other choices reflect permissible or prudent actions, such as sharing information with authorized third parties or using secure data storage.