GLBA (Gramm–Leach–Bliley Act)

What is GLBA (Gramm–Leach–Bliley Act)?

GLBA mandates data protection, security programs, and privacy notices for financial institutions. It includes requirements for vendor oversight under the Safeguards Rule. In TPRM, GLBA compliance demands verifying that vendors with access to financial data maintain strong security controls.

FAQs

Do vendors fall under GLBA safeguards?

Yes, through obligations imposed on financial institutions.

Does GLBA require risk assessments?

Yes, including vendor-related risks.

Are privacy notices required?

Yes, for customer information practices.