The Gramm–Leach–Bliley Act (GLBA)

What is The Gramm–Leach–Bliley Act (GLBA) ?

GLBA establishes privacy, security, and safeguarding rules for protecting nonpublic personal information. It requires risk assessments, vendor oversight, incident response planning, and strong data security controls. In TPRM, GLBA compliance dictates how financial institutions evaluate and monitor vendors handling sensitive financial data.

FAQs

Does GLBA apply to vendors?

Yes, through obligations imposed on financial institutions.

Does GLBA require vendor risk assessments?

Yes, vendor oversight is a key requirement.

Does GLBA mandate security programs?

Yes, including administrative, technical, and physical controls.