/*
Customise Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.

Advertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns.

/*]]>*/

GLBA Compliance

What is GLBA?

The Gramm-Leach-Bliley Act requires financial institutions – companies that offer consumers financial products or services like loans, financial or investment advice, or insurance – to explain their information-sharing practices to their customers and to safeguard sensitive data. More detailed information from the Federal Trade Commission can be found here.

Who Does GLBA Impact?

GLBA compliance applies to financial institutions, or any business offering financial products and services to individuals. This includes loans, debt collection, financial advice, investment advice, or insurance. The FTC includes a wide range of organizations considered to be financial institutions for the purposes of GLBA compliance. These include:

ATM operatorsBanksCar Rental CompaniesCheck-cashing Businesses
Consumer Credit Reporting AgenciesCredit Counseling ServicesCourier ServicesCredit Card Companies
Credit Reporting AgenciesCredit UnionsDebt Collection AgenciesEducational Institutions*
Financial Advisory FirmsHedge FundsInsurance AdvisorsLoan Brokers
Mortgage BrokersMortgage LendersNon-Bank LendersNon-Bank Mortgage Lenders
Property AppraisersReal Estate FirmsReal Estate Settlement Service ProvidersInvestment Advisers
StockbrokersTax Preparation Services


Additionally, if an organization receives data from financial institutions, they must also adhere to GLBA compliance requirements. Financial institutions are responsible for ensuring that these organizations implement safeguards to ensure non-public customer information in their care is protected.

Penalties for Non-Compliance with GLBA

Failure to meet GLBA compliance requirements can result in fines and time in prison. GLBA compliance violations carry penalties not just for financial institutions, but also for individuals. Financial institutions who intentionally disregard GLBA compliance requirements, along with their owners and directors, can face criminal prosecution in a federal district court with criminal fines and imprisonment.

Penalties for failure to meet GLBA compliance requirements include:

  • Fines of $100,000 for each violation for financial institutions found in violation of GLBA compliance
  • Fines of $10,000 for each violation for officers and directors in charge of institutions found to be in violation of GLBA compliance
  • Up to 5 years in prison for officers and directors in charge of institutions found in violation of GLBA compliance

A cyber risk assessment is the first step. Schedule yours today.