Tracker record · Federal · Final rule
GLBA Safeguards Rule, including notification duty
The Gramm-Leach-Bliley Act's Safeguards Rule requires financial institutions to maintain a written information-security program, with amendments adding a notification duty for certain security events. The GLBA Privacy Rule's notice-and-opt-out duties sit alongside it.
Status
- Legal status
- In effect (Notification amendment published November 13, 2023, effective May 13, 2024)
- Allegation or finding
- Operative law
- Applicability
- Financial institutions
- Enforceability
- Binding on parties within scope
- Law checked through
- October 12, 2026
- Primary-source pinpoint
- 16 C.F.R. part 314
- Citation
- 16 C.F.R. part 314; notice duty ยง314.4(j)
- Source
- 16 C.F.R. part 314
Related guides
- Financial, Insurance, and Credit Data
- Federal and Multistate Breach Duties
- Reasonable Security and the Texas Cybersecurity Safe Harbor