Non-Public Personal Information (NPI)
US financial-sector term for personally identifiable financial information that a consumer provides to, or is derived from a transaction with, a financial institution.
Full Definition
The Gramm-Leach-Bliley Act (GLBA) and its implementing Regulation P introduced 'non-public personal information' as the primary category of consumer financial data regulated at the federal level in the US. NPI covers information a consumer gives a financial institution to obtain a product or service (name, address, SSN, account number, income), information derived from a transaction (transaction history, balances), and information gathered from third parties about the consumer. Publicly available information is excluded.
Financial institutions must provide consumers with a GLBA privacy notice describing categories of NPI collected and shared, must offer an opt-out from certain sharing with non-affiliated third parties, and must apply the FTC's Safeguards Rule technical controls to NPI. Although NPI is a US-specific concept, it is a useful cross-walk when mapping financial data to parallel categories under GDPR (financial data as a general category, special categories only where it reveals racial/ethnic origin, political opinions etc.) and DPDP (financial data under the broader personal data definition without a separate sensitive category).
Related terms
Personal Data
Any information that relates to an identified or identifiable natural person.
Sensitive Personal Data
Categories of personal data that warrant heightened protection due to the elevated risk of harm if misused.
Data Classification
The process of labelling each data asset with its sensitivity, regulatory category and handling requirements.
Relevant regulations
Automate your privacy program
TruePrivacy handles DSRs, consent management, data mapping, and breach response — all in one platform.
Free 14-day trial · No credit card required · Setup in minutes