Which of the following practices is NOT acceptable when delivering privacy notices?

The practice of posting a privacy notice in the branch lobby is generally not considered an acceptable method for delivering privacy notices directly to consumers. Privacy notices are intended to inform individuals about how their personal information is collected, used, and shared. The key requirement for these notices is that they must be provided in a manner that ensures individuals receive and can access the information.

While posting in the branch lobby makes the notice publicly accessible, it does not guarantee that individual customers will see or understand the information. Furthermore, privacy regulations often require that notices be delivered directly to individuals in ways that allow for clear communication and acknowledgment. This can be accomplished through methods such as mailing a copy, handing it directly to the customer, or delivering it electronically via email, where customers are expected to open and read the information.

Other methods, while they may reach a broader audience, fail to meet the requisite level of individual notice and do not ensure that all customers are informed in a timely and personal manner. Therefore, while posting in a branch lobby might serve as supplementary information, it does not fulfill the primary obligation of providing direct notice to the individuals whose data is being managed.