GLBA

Gramm-Leach-Bliley Act, the US umbrella for safeguarding nonpublic personal information held by financial institutions. Drives the Safeguards Rule (16 CFR Part 314) and the privacy notices regime; FTC and the federal banking regulators each enforce the parts that touch their jurisdiction. Attention is triggered by a vendor sharing of NPI without an opt-out hook, by missing opt-out disclosure on a privacy notice, by an unaccounted-for data-flow in a joint marketing arrangement, and by the failure to deliver an annual privacy notice to existing customers within the prescribed period.

/glba