Which are three key rules of the GLBA?
The Act consists of three sections: The Financial Privacy Rule, which regulates the collection and disclosure of private financial information; the Safeguards Rule, which stipulates that financial institutions must implement security programs to protect such information; and the Pretexting provisions, which prohibit …
What does the Financial Privacy Rule regulate?
Under the law, agencies enforce the Financial Privacy Rule, which governs how financial institutions can collect and disclose customers’ personal financial information; the Safeguards Rule, which requires all financial institutions to maintain safeguards to protect customer information; and another provision designed …
What does GLBA apply?
Gramm-Leach-Bliley Act applies to all businesses, regardless of size, that are “significantly engaged” in providing financial products or services to consumers. … The law also applies to companies like credit reporting agencies and ATM operators that receive information about customers of other financial institutions.
What does GLBA have to do with information security GLBA?
The GLBA requires that financial institutions act to ensure the confidentiality and security of customers’ “nonpublic personal information,” or NPI. … The Safeguards Rule states that financial institutions must create a written information security plan describing the program to protect their customers’ information.
What is a GLBA risk assessment?
Categorizing controls and developing definitions for control adequacy and residual risk and applying them to each technology. … Creating various reports showing vulnerabilities, controls, and a risk rating for each technology, as well as which vulnerabilities have insufficient controls, among others.
What are the two significant parts of the Gramm-Leach-Bliley Act?
The GLBA requires companies that qualify as “financial institutions” to take several affirmative steps in order to prevent the unauthorized collection, use, and disclosure of NPI. It imposes these obligations under two “Rules”: (i) the Privacy Rule, and (ii) the Safeguards Rule.
Can my bank disclose customer information?
categories of information a bank may disclose (all banks, except a bank that does not intend to make any disclosures or only makes disclosures under the exceptions may simply state that) … information sharing practices about former customers (all banks)
What are the objectives of Part 314 of the GLBA?
(a) Purpose. This part, which implements sections 501 and 505(b)(2) of the Gramm-Leach-Bliley Act, sets forth standards for developing, implementing, and maintaining reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of customer information.
When was the GLBA Act enacted and why?
The act was passed in late 1999 and allows banks to offer financial services previously forbidden by the Glass-Steagall Act. Under the GLBA, each manager or service-person is only allowed to sell or manage one type of financial product/instrument.
What is required under the safeguard rule?
The Safeguards Rule requires financial institutions under FTC jurisdiction to have measures in place to keep customer information secure.
What does the safeguards rule address?
Promulgated in 2002 pursuant to the Gramm-Leach-Bliley Act, the Safeguards Rule obligates covered financial institutions to develop, implement and maintain a comprehensive information security program that complies with the Rule’s requirements.
Which industry is most impacted by the Gramm-Leach-Bliley Act?
financial services industry
We find that the law has a differential impact across the financial services industry. All three industries have gained due to this law with commercial banks benefiting most, followed by the insurance industry.
What is governed under the Gramm-Leach-Bliley Act GLBA )?
The Gramm-Leach-Bliley Act requires financial institutions – companies that offer consumers financial products or services like loans, financial or investment advice, or insurance – to explain their information-sharing practices to their customers and to safeguard sensitive data.
What is the FTC implementation of the GLBA quizlet?
FTC issues the Safeguards Rule to implement the GLBA info security requirements. Protect against any anticipated threats or hazards to security or integrity of cusomter info. Protect against unauthorized access to, or use of, such info that could result in harm or inconvenience.
Who does the safeguards rule apply to?
Because the Safeguards Rule applies only to relationships and transactions that are “for personal, family, or household purposes,” finding services involving consumer transactions for customers (i.e., consumers with whom a financial institution has an ongoing relationship) will now be covered by the Safeguards Rule.