Which obligations do lenders have when collecting client information?

• A. Comply with privacy laws, minimise data collection, secure data, and use information only for stated purposes.
• B. Obtain consent for all data and share with affiliates without restrictions.
• C. Store data indefinitely regardless of purpose.
• D. Sell data to third parties to maximise profits.

Answer: (A)

Lenders collecting client information must follow privacy obligations that protect individuals’ personal data. The best approach is to comply with privacy laws, minimize the data collected to what is truly necessary, secure that data against unauthorized access, and use it only for the purposes disclosed to the client. This aligns with principles of lawful and fair processing, data minimization, strong security controls, and purpose limitation, which together ensure information isn’t kept or used beyond what was stated or required for the lending relationship. The other options push for unrestricted sharing, indefinite storage, or selling data, which would violate these protections by expanding beyond necessary, consented, and lawfully permissible uses.