What is the Gramm-Leach-Bliley Act (GLBA)?
The Gramm-Leach-Bliley Act (GLBA), or the Financial Services Modernization Act of 1999, is a federal law that governs the security and privacy of customer financial information in Pennsylvania and other states. GLBA requires financial institutions to protect customer data, ensure the security of customer information, and help consumers maintain control over their own personal information. GLBA applies to a wide range of financial institutions, including banks, credit unions, securities firms, insurance companies, and other companies that offer financial services. Companies that are subject to GLBA must establish and implement a comprehensive information security program that includes managerial oversight, physical security, employee training, and administrative, technical, and physical controls to protect customers’ nonpublic personal information. The GLBA also requires financial institutions to give customers greater access to their own personal information. For example, under GLBA, customers can request to see a financial institution’s privacy notices as well as opt out of sharing their information with third parties. Overall, the GLBA is an important law that allows customers to remain in control of their financial information and enables financial institutions to make sure that customer’s personal data is properly protected.
Related FAQs
What is the process for reporting a data security breach?How is data security enforced?
What is a breach notification law?
What is the California Consumer Privacy Act (CCPA)?
What is the UK’s Data Protection Act (DPA)?
What should I include in my data security policy?
What is the scope of HIPAA?
What are the penalties for not complying with data security laws?
What are the GDPR principles?
What is the purpose of the GDPR accountability principle?
Related Blog Posts
Top 5 Recent Developments in Data Security Law - July 31, 2023Understanding the Impact of Data Security Law on Businesses - August 7, 2023
What is the GDPR and How Does it Apply to Data Security Law? - August 14, 2023
What is the Role of the Federal Government in Regulating Data Security Laws? - August 21, 2023
Are State Data Security Laws Compliant With GDPR Regulations? - August 28, 2023