{
  "node_id": "us-16-cfr-part-314-ftc-safeguards-rule",
  "title": "US 16 CFR Part 314: Standards for Safeguarding Customer Information (FTC Safeguards Rule)",
  "domain": "Banking & Global Finance",
  "version": "1.0.0",
  "last_updated": "2026-05-31",
  "bluf": "US 16 CFR Part 314 (the FTC Safeguards Rule) implements Section 501(b) of the Gramm-Leach-Bliley Act (GLBA) by requiring covered financial institutions under FTC jurisdiction to develop, implement, and maintain a comprehensive written information security program with administrative, technical, and physical safeguards. The 2021 amendments (effective June 9 2023) introduced specific requirements: designate a Qualified Individual to oversee the program, conduct risk assessments, implement access controls, conduct multi-factor authentication, encrypt customer information in transit and at rest, train personnel, oversee service providers, develop incident response plan, and provide annual reports to the board. Notification to FTC required within 30 days of security event affecting 500+ consumers (effective May 13 2024).",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "glba",
      "cfr_16_313",
      "nist_csf",
      "state_laws",
      "industry_mapping"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "primary_citations_count": 5
}