On October 20, the CFPB adopted the rule, previously proposed in May, allowing financial institutions that limit sharing of consumer data to post annual privacy notices online instead of delivering such notices individually, as prescribed by the Gramm-Leach-Bliley Act. Release. Rule.