GLBA
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
GLBA - Gramm-Leach-Bliley Act of 1999, supplying the general framework for confidentiality of records in the financial services sector through its Privacy Rule and Safeguards Rule.
In the CIPP/US body of knowledge, GLBA comes up under Chapter 5: Federal and State Regulators and Enforcement of Privacy Law; Chapter 6: State Comprehensive Privacy Laws; Chapter 9: Financial Privacy.
GLBA in context
- A documented inventory can ==reduce penalties== if a problem later occurs, and is legally required for entities under the ==GLBA Safeguards Rule==. (Data Inventory and Data Classification)
- A ==controller== determines purposes and means; a ==processor== processes on the controller's behalf - mirrored by HIPAA's ==business associate== and GLBA's ==service provider==. (Data Accountability - Controllers, Processors, and Encryption)
- GLBA requires ==annual== notices to financial customers. (Delivering Privacy Notices - Layered, Just-in-Time, and Mobile)
Where GLBA is covered in the CIPP/US study notes
- Federal Privacy Enforcement Outside the FTC
- Which Entities Are Excluded from Business
- Financial Privacy Landscape and Regulators
Related terms
Test yourself on GLBA
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.