1. Short title; table of contents (a) Short title This Act may be cited as the Data Privacy Act of 2023 . (b) Table of contents The table of contents for this Act is as follows: Sec. 1. Short title; table of contents. Sec. 2. Protection of nonpublic personal information. Sec. 3. Obligations with respect to the collection and disclosure of nonpublic personal information. Sec. 4. Disclosure of institution privacy policy. Sec. 5. Rulemaking. Sec. 6. Relation to State laws. Sec. 7. Definitions. Sec. 8. Obligations with respect to access and deletion of nonpublic personal information. Sec. 9. Obligations with respect to the international sharing of nonpublic personal information. Sec. 10. Repeal of expired provisions. Sec. 11. GAO Report. Sec. 12. Sense of Congress. Sec. 13. Effective date. 2. Protection of nonpublic personal information Section 501 of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6801 ) is amended— (1) in subsection (a)— (A) by striking of its customers and inserting of individuals with whom such financial institution has a customer or consumer relationship ; and (B) by striking those customers' nonpublic personal information and inserting those individual’s nonpublic personal information ; and (2) by adding at the end the following: (c) Use of nonpublic personal information It shall be unlawful for a financial institution to willfully use nonpublic personal information without the consent of an individual with whom the financial institution has a customer or consumer relationship. . 3. Obligations with respect to the collection and disclosure of nonpublic personal information (a) In general Section 502 of the Gramm-Leach-Bliley Act ( 15 U.S.C. 6802 ) is amended— (1) in the heading, by striking DISCLOSURES OF and inserting THE COLLECTION AND DISCLOSURE OF NONPUBLIC ; (2) in subsection (a)— (A) by inserting before disclose the following: collect nonpublic personal information from an individual with whom such financial institution has a customer or consumer relationship or