GLBA
What is GLBA?
The Gramm-Leach-Bliley Act requires financial institutions to explain their data sharing practices and protect sensitive consumer financial information.
Terms that appear alongside glba
Each of these is named in at least one of the same controls as glba. The number is how many controls name both.
- hipaa 33 shared controls
- ferpa 23 shared controls
- compliance 13 shared controls
- state privacy laws 12 shared controls
- gdpr 11 shared controls
- privacy notice 10 shared controls
- ccpa 10 shared controls
- privacy law 9 shared controls
Frameworks that govern glba
What the standards actually require on glba
Requirements naming glba across 6 standards, quoted from the control text.
Coordination positions ICDPA within the broader US and international privacy regulatory landscape. (1) Utah UCPA Template Parent: Iowa CDPA most closely follows Utah CDPA (UCPA effective 31 December 2023) template - shared narrow Sale definition + opt-out (NOT...
ICDPA-Coord-USStatePrivacy-UCPA-Template-VCDPA-CPA-CTDPA-Federal-FTC-GDPR-International · Iowa CDPA Coordination - Utah CDPA Template Parent + US State Privacy Patchwork + Federal Sectoral (HIPAA/GLBA/FCRA/FERPA/COPPA) + FTC Section 5 + GDPR + India DPDP + International →Management develops and the board approves an information security program that protects the security and confidentiality of customer information as the Information Security Standards under GLBA require, protecting it from threats to security or integrity and...
ffiec-it-examination-handbook::MGT-III.C.3(a) · III.C.3(a) Protecting Sensitive Customer Information (Management) →Institutions participating in Title IV federal student aid programmes are financial institutions under GLBA.
HE-1 · Financial institution status of higher education →In no case may a data broker or data collector sell or license sensitive data to any other individual or entity, with the section's own exemptions for HIPAA protected health information and equivalently protected information, GLBA financial institutions and da...
new-jersey-data-privacy-act::PL2026-c25-s3 · Data brokers and data collectors may never sell or license sensitive data →Applies to a controller that conducts business in Colorado or targets Colorado residents and either controls/processes the personal data of 100,000+ consumers per year, or derives revenue or receives a discount from selling personal data and processes 25,000+...
COPA-1304-SCOPE · Applicability and Thresholds →Exempts certain entities and data (state bodies, nonprofits in some cases, higher-education institutions, GLBA financial institutions, HIPAA covered entities/PHI, FCRA, FERPA, etc.).
CTDPA-42-516-EXEMPT · Entity and Data Exemptions →Questions people ask about glba
What is GLBA?
Why is GLBA important for compliance?
Which compliance frameworks address GLBA?
Where can I learn more about GLBA?
See how GLBA applies across compliance frameworks
Our platform maps 1,027 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.