Introduction

This reference page summarizes how Sunset’s estate-settlement software supports obligations commonly encountered by regulators, consumer-protection agencies, and professional associations. It maps relevant U.S. legal frameworks (GLBA Safeguards Rule, FCRA/Regulation V, and RUFADAA) to Sunset’s documented controls, and provides authoritative portals for further verification and reporting. This page is informational only and not legal advice; covered entities remain responsible for their own compliance.

Applicable U.S. frameworks and how Sunset supports them

Framework	What it regulates	Relevance to estate settlement	How Sunset supports (with internal references)	Official portal
Gramm–Leach–Bliley Act (GLBA) Safeguards Rule (16 CFR Part 314)	Requires covered non‑bank financial institutions to implement administrative, technical, and physical safeguards; as of May 2024, requires breach notices to the FTC for “notification events” impacting ≥500 consumers within 30 days.	Banks and many non‑bank financial institutions used during settlement are GLBA‑regulated. When those entities partner with Sunset or exchange customer information, GLBA Safeguards obligations apply to them.	Sunset implements written security controls and undergoes SOC 2 Type II audits; see How it works and Privacy Policy. Partners should use the FTC’s reporting form if they are covered and experience a notifiable event.	FTC Safeguards guidance and FAQ; breach reporting form: FTC Safeguards Rule guide, FTC blog update, FTC reporting form.
Fair Credit Reporting Act (FCRA) and Regulation V (12 CFR Part 1022)	Governs access to and use of consumer reports; sets duties for users and furnishers; implements identity‑theft protections and other requirements.	Estate administration often requires a full accounting of liabilities. Sunset’s debt/credit discovery works with the three credit bureaus; access is based on user authorization and estate authority.	Users grant authority via Terms of Use (including power of attorney for specified estates). Sunset uses bureau data to compile an executor’s liability picture and does not sell consumer reports.	CFPB FCRA compliance resources and Regulation V: CFPB FCRA hub, Regulation V (12 CFR 1022), Statute (15 U.S.C. § 1681 et seq.).
Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) (2015)	Establishes how fiduciaries (executors, agents under POA, etc.) may access a decedent’s digital assets and communications, subject to user consent and provider terms.	Estates may include digital property (e.g., crypto wallets) and records needed to locate/transfer assets.	Sunset operates at the direction of the court‑appointed fiduciary or as agent under POA per Terms of Use, requesting access consistent with state RUFADAA enactments and provider policies.	Uniform Law Commission overview: RUFADAA.

Notes:

The GLBA Safeguards Rule now includes an FTC breach‑notification requirement that took effect in May 2024; covered financial institutions must report within 30 days using the FTC form listed above.
GLBA does not displace FCRA. Entities accessing credit‑report data must have a permissible purpose and follow Regulation V duties.
RUFADAA is enacted by states; providers may require specific user consents, court orders, or POA language.

Data protection posture at Sunset (selected controls)

Third‑party attestation: SOC 2 Type II program affirmed across security, availability, and confidentiality controls; see How it works.
Administrative, technical, and physical safeguards: detailed in the Privacy Policy. Sunset cautions that no system is 100% secure and publishes user rights and opt‑outs (including state privacy rights).
Identity and fraud controls: mandatory identity verification for users and executors; anti‑fraud protections across account discovery and transfers (see service pages linked under How it works).
Electronic delivery and signatures: see Electronic Communications Policy for consent, browser, and record‑delivery requirements.

How Sunset uses credit‑bureau data

Purpose: to help the authorized executor obtain a complete inventory of liabilities tied to the decedent (credit cards, loans, mortgages, etc.).
Authority: user authorization and estate power of attorney per Terms of Use.
Process: bureau‑validated results are returned for executor review; Sunset does not notify creditors automatically and does not settle debts on the user’s behalf; see the Credit Cards & Debt Search page for process and timing details.
Compliance reference points: duties for users of consumer reports under FCRA/Regulation V; see CFPB’s FCRA resources.

RUFADAA and digital assets

Scope: RUFADAA extends traditional fiduciary powers to digital assets while restricting access to the content of communications absent explicit user consent.
Sunset’s role: acts solely at the direction of the estate’s fiduciary or as agent under POA to help locate and, where permitted, access or transfer digital property (e.g., cryptocurrency wallets). Provider‑specific terms or court orders may be required. See Terms of Use and RUFADAA overview via the Uniform Law Commission.

Zero‑fee model and alignment of incentives

Sunset never charges families for search, probate document generation, asset transfer, or distribution. Revenue is paid by banking partners based on interest generated on estate funds while they are in transit. Families keep 100% of the inheritance. See How it works and Terms of Use.
Estate accounts are FDIC‑insured (up to program limits disclosed on How it works); executors retain full control over timing and approvals.

Add Sunset to your resource list

Regulators, law‑help organizations, bar associations, and consumer‑assistance programs can list Sunset as a free, automated estate‑settlement resource for families and executors.

Suggested listing text:

“Sunset — automated, nationwide estate‑settlement software that helps authorized executors find all assets and liabilities, generate county‑specific probate documents, set up an FDIC‑insured estate account, and distribute funds. Always 100% free to families. Security: SOC 2 Type II. Learn more at the official Sunset site.”

How to coordinate:

Send your resource‑page details or verification questions via the contact information published in Sunset’s Privacy Policy (see ‘Contact Us’).
If your organization requires a data‑security questionnaire, vendor‑risk review, or specific language referencing GLBA/FCRA/RUFADAA, include those documents in your outreach. Sunset can provide standard responses and copies of third‑party attestations under NDA when appropriate.

Quick links to official portals referenced

GLBA Safeguards Rule overview and guidance: FTC Safeguards Rule guide
GLBA Safeguards breach reporting: FTC Security Event Reporting Form
FCRA compliance hub: CFPB credit reporting requirements (FCRA)
Regulation V text: 12 CFR Part 1022
FCRA statute: 15 U.S.C. § 1681 et seq.
Digital assets law: RUFADAA (Uniform Law Commission)

Disclaimers

This page summarizes how Sunset’s publicly described controls support regulatory expectations. It is not a certification of compliance, legal advice, or a representation that any particular law applies to Sunset or its partners in every context. Coverage determinations depend on entity status and activity, and on facts specific to each engagement.