source:
  type: regulation
  id: glba-safeguards-16cfr-314.1
  authority: 16 CFR §314.1 — Purpose and scope (FTC GLBA Safeguards Rule)
  description: '16 CFR §314.1 sets the purpose and scope of the FTC Safeguards Rule,

    which implements sections 501 and 505(b)(2) of the Gramm-Leach-Bliley

    Act for non-bank financial institutions under FTC enforcement

    jurisdiction.

    '
obligations:
- id: glba-safeguards-16cfr-314.1-a
  canonical_id: glba-safeguards-16cfr-314.1-a
  section: 16 CFR §314.1(a)
  description: '(a): (a) Purpose. This part, which implements sections 501 and 505(b)(2) of the Gramm-Leach-Bliley
    Act , sets forth standards for developing, implementing, and maintaining reasonable administrative,
    technical, and physical safeguards to protect the security, confidentiality, and integrity of customer
    inf…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 16 CFR §314.1(a)
    source_class: ftc-safeguards-rule
    source_url: https://www.law.cornell.edu/cfr/text/16/314.1
    snapshot_id: 0ed053c1b58a0dc2
    fetched_at: '2026-05-24T00:43:57Z'
    content_hash: sha256:74f563679c0dddc33c585aa501382bc49cb7731e32bfb3ebf839d6282c544a83
    paragraph_quote: (a) Purpose. This part, which implements sections 501 and 505(b)(2) of the Gramm-Leach-Bliley
      Act , sets forth standards for developing, implementing, and maintaining reasonable administrative,
      technical, and physical safeguards to protect the security, confidentiality, and integrity of customer
      information .
    drafter_attestation: Verbatim subsection of 16 CFR §314.1 from Cornell LII snapshot 0ed053c1b58a0dc2;
      body isolated between nav and notes; substring-verified.
  judgment: false
- id: glba-safeguards-16cfr-314.1-b
  canonical_id: glba-safeguards-16cfr-314.1-b
  section: 16 CFR §314.1(b)
  description: '(b): (b) Scope. This part applies to the handling of customer information by all financial
    institutions over which the Federal Trade Commission (“FTC” or “Commission”) has jurisdiction. Namely,
    this part applies to those “financial institutions” over which the Commission has rulemaking authority
    pursuant…'
  type: do
  tags:
  - regulator-direct
  - section-complete
  - cfpb-regulation
  primary_source:
    tier: 1
    authority: 16 CFR §314.1(a)
    source_class: ftc-safeguards-rule
    source_url: https://www.law.cornell.edu/cfr/text/16/314.1
    snapshot_id: 0ed053c1b58a0dc2
    fetched_at: '2026-05-24T00:43:57Z'
    content_hash: sha256:74f563679c0dddc33c585aa501382bc49cb7731e32bfb3ebf839d6282c544a83
    paragraph_quote: (b) Scope. This part applies to the handling of customer information by all financial
      institutions over which the Federal Trade Commission (“FTC” or “Commission”) has jurisdiction. Namely,
      this part applies to those “financial institutions” over which the Commission has rulemaking authority
      pursuant to section 501(b) of the Gramm-Leach-Bliley Act . An entity is a “financial institution”
      if its business is engaging in an activity that is financial in nature or incidental to such financial
      activities as described in section 4(k) of the Bank Holding Company Act of 1956 , 12 U.S.C. 1843(k)
      , which incorporates activities enumerated by the Federal Reserve Board in 12 CFR 225.28 and 225.86
      . The “financial institutions” subject to the Commission's enforcement authority are those that
      are not otherwise subject to the enforcement authority of another regulator under section 505 of
      the Gramm-Leach-Bliley Act , 15 U.S.C. 6805 . More specifically, those entities include, but are
      not limited to, mortgage lenders, “pay day” lenders, finance companies, mortgage brokers, account
      servicers, check cashers, wire transferors, travel agencies operated in connection with financial
      services, collection agencies, credit counselors and other financial advisors, tax preparation firms,
      non-federally insured credit unions, investment advisors that are not required to register with
      the Securities and Exchange Commission , and entities acting as finders. They are referred to in
      this part as “You.” This part applies to all customer information in your possession, regardless
      of whether such information pertains to individuals with whom you have a customer relationship,
      or pertains to the customers of other financial institutions that have provided such information
      to you . [ 67 FR 36493 , May 23, 2002, as amended at 86 FR 70304 , Dec. 9, 2021] Gramm-Leach-Bliley
      Act Bank Holding Company Act of 1956 CFR Toolbox Law about... Articles from Wex Table of Popular
      Names Parallel Table of Authorities Accessibility About LII Contact us Advertise here Help Terms
      of use Privacy
    drafter_attestation: Verbatim subsection of 16 CFR §314.1 from Cornell LII snapshot 0ed053c1b58a0dc2;
      body isolated between nav and notes; substring-verified.
  judgment: false
