FTC GLBA Safeguards Rule (16 CFR Part 314)
The FTC's Standards for Safeguarding Customer Information (Safeguards Rule, revised 2021, effective June 2023) implements the Gramm-Leach-Bliley Act (GLBA) requirements for financial institutions. It mandates a comprehensive information security programme with specific technical controls including encryption, MFA, access controls, and incident response.
Domains
Incident Response and Reporting
Testing, Training and Oversight
Safeguard Elements
Information Security Programme Standards
Purpose, Scope and Definitions
Frequently Asked Questions
Map FTC GLBA Safeguards Rule (16 CFR Part 314) to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.