The Gramm-Leach-Bliley Act (GLBA) Made Simple

As an employee of a financial institution, you have ethical and legal responsibilities to protect the privacy and security of your customers’ non-public personal information. Several sections of the Gramm-Leach-Bliley Act of 1999 (the GLBA) establish the legal standards by which you must safeguard this information. Mismanaging consumers’ personal information exposes financial institutions to liability, so it is important to be familiar with the GLBA’s legal requirements. This course helps organizations build trust and loyalty among customers by teaching employees to comply with the GBLA and protect customer data.

This course starts by defining and explaining how a the GLBA defines a “financial institution” and “non-public personal information.” There are three main sources of non-public personal information, which are detailed here. Of course, your obligations as a financial institution depend on whether the information collected is from a consumer or a customer. The GLBA also has three sections specifically dealing with protecting non-public personal information: The Financial Privacy Rule, the Safeguard Rule, and the Pretexting provisions. This course provides information on these topics, as well as matters concerning oversight, security breaches, and legal consequences.

You are likely already aware that financial institutions, generally, have more legal obligations, and are under stricter scrutiny, than most other institutions. The GLBA simply adds another piece to that puzzle. A piece, like all the others, you must know and follow. Utilize the materials provided in this training video and understand your requirements under the GLBA.

   This course is in the Video On Demand format, to read about Video On Demand features click here.

All employees in the financial industry

• Introduction
• What Is A Financial Institution?
• What Is Non-Public Information?
• Consumer vs. Customer
• The Financial Privacy Rule
• The Safeguard Rule
• Safeguarding Non-public Personal Information
• Oversight
• The Pre-Texting Provisions
• Solutions
• Security Breaches
• Consequences
• Conclusion

• The General Data Protection Regulation (GDPR) Part 4: Responsibilities Of Controllers Or Processors
• The General Data Protection Regulation (GDPR) Part 3: Foundations Of Data Processing
• The General Data Protection Regulation (GDPR) Part 2: Five Basic Principles