8 V.S.A. § 10804: Associated third party; notifications

(a) A covered entity may notify an associated third party, if any, if it reasonably believes that the financial exploitation or attempted financial exploitation of a customer is occurring or has occurred and such disclosure is in the best interests of the customer.

(b) A covered entity may choose not to notify an associated third party if it reasonably believes that the third party is, was, or may be engaged in the financial exploitation or attempted financial exploitation of the customer.

(c) A covered entity shall limit disclosures to an associated third party to only information necessary to convey its suspicion that the customer was or may be the victim or intended victim of financial exploitation.

(d) Any disclosure by a covered entity pursuant to this section is exempt from the financial privacy protections specified under subchapter 2 of this chapter and, to the extent permitted by federal law, under the Gramm-Leach-Bliley Act, 15 U.S.C. § 6801 et seq., as those laws may be amended.