What US Gramm-Leach-Bliley Act 1999 (GLBA) - Financial Privacy and Data Protection requires
The Gramm-Leach-Bliley Act 1999 (GLBA, Pub.L. 106-102) requires financial institutions to protect consumers' nonpublic personal information (NPI). The Financial Privacy Rule (16 CFR Part 313) mandates annual privacy notices and opt-out rights for sharing NPI with nonaffiliated third parties. The Safeguards Rule (16 CFR Part 314), updated in 2023, requires a written information security program with specific technical controls including encryption, access controls, MFA, and penetration testing for covered financial institutions. The Pretexting Rule prohibits social engineering to obtain NPI.
Pillar: Banking & Global Finance · Authority: US Federal Trade Commission; Federal Financial Institutions Examination Council (FFIEC) · Version: 1.0.1 · Last updated:
Primary source: https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act
SHA-256 integrity: e43d308074983b3735e0b3a83410f965eca113abfda5ca0912b6d6e83a0a6cfb
Primary Citations — 5 traced to source
- Subtitle A (Financial Privacy) and Subtitle B (Safeguards) — Gramm-Leach-Bliley Act (GLBA) - Public Law 106-102, 15 USC §§6801-6827
- §313.7 (opt-out), §313.13 (exceptions to opt-out) — FTC Financial Privacy Rule - 16 CFR Part 313
+ 3 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-glba-gramm-leach-bliley-act-1999.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-glba-gramm-leach-bliley-act-1999.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-glba-gramm-leach-bliley-act-1999
- Back to registry: Browse all 10,131 compliance nodes