<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

GLBA Compliance

author Ncontracts
1 min read
Oct 31, 2018

The Gramm-Leach Bliley Act went into effect in 1999. Also known as the Financial Modernization Act, it mandates that financial institutions explain to customers how they share their financial information. To be GLBA compliant, these institutions must communicate with their customers to inform them as to how they share data and make them aware that they have the right to opt out if they prefer their data not be shared. Specific protections should also be applied to customer data in accordance with a written information security plan created by the institution.

The type of information the GLBA protects includes nonpublic personal information including Social Security number, credit and income history, credit and bank account numbers, phone numbers, addresses and any other information that is given to them that may not be public. Institutions must also create an information security plan describing how they work to protect their customers’ information. The security plan must be tailored according to the institution’s size, operations, and complexity as well as the sensitivity of the customer’s information.

For financial institutions to be GLBA compliant, they must follow a set of guidelines which are as follows:

  • They must designate one or more employees to coordinate an information security program.

  • They must identify and assess risks to the customer’s information in the company’s operation and evaluate the effectiveness of the current safeguards in place.

  • They must design and implement a safeguard program that is regularly monitored and tested.

  • They must select service providers that maintain these safeguards and oversee the handling of customer information.

  • They must evaluate and adjust the program as needed according to changes made in the business’s organization or security testing and monitoring procedures.

Being GLBA compliant is not only a necessary part of doing business as a financial institution, but it can also help to gain a customer’s trust and loyalty. Find out more about GLBA compliance by looking up their safeguards rule so you can see how financial institutions work to protect their customers.

 

Related: What Is A Compliance Management System And Why Your FI Needs One

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Nrisk Regulatory Compliance Management News & Updates HMDA Risk Mortgage Lenders Ncomply Vendor Management Business Resiliency CRA Lending Compliance Blog Vendor CFPB Ncontinuity Third-Party Vendor Management Business Continuity Cybersecurity Fintech NVendor Strategic Planning Ncyber Ntransmittal Audits & Findings Company Culture OCC Regulatory Updates Audit Nverify Regulatory Compliance Exams FDIC Compliance Management Findings Nfindings NCUA Contract Management Employee Intranet Contract FRB Business Continuity Management FFIEC Findings Management Ncontracts manager Third-Party Vendors Vendor Risk Enterprise Risk Management ABA Bank Access Control Audit Findings Board Portal Call Report Due Diligence Efficiency Employee Engagement Exam findings FIEC Inc. 5000 Internal Audit Management Nboardportal Verify Wealth Management
The Gramm-Leach-Bliley Act
Risk & Compliance

The Gramm-Leach-Bliley Act

Oct 31, 2018 1 min read
Consumer Complaints Are at an All-Time High. What Are You Doing About It?
Risk & Compliance

Consumer Complaints Are at an All-Time High. What Are You Doing About It?

Mar 10, 2021 3 min read
FFIEC Guidelines
Risk & Compliance

FFIEC Guidelines

Nov 13, 2018 1 min read