The Gramm-Leach-Bliley Act governs the collection and disclosure of customers' personal financial information by financial institutions. It requires financial institutions to implement safeguards to protect customer information and outlines rules for disclosing a financial institution's privacy policy. The Act also applies to any company that receives customers' personal financial information, regardless of whether they are a financial institution. It provides enforcement mechanisms and establishes criminal and administrative penalties for violations.

1. The Gramm-Leach-Bliley Act
2 RULES
FINANCIAL PRIVACY RULE SAFEGUARDS RULE PRETEXTING PROTECTION
Governs the collection and disclosure of
customers’ personal financial information by
financial institutions. It also applies to
companies, regardless of whether they are
financial institutions, who receive such
information
6809
Definitions
6808
Study of information sharing among affiliates
6805
Enforcement
6803
Disclosure of institution privacy policy
6802
Obligations to disclosures of personal information
6807
Relation to State laws
6801
Protection of nonpublic personal information
6804
Rulemaking
6806
Relation to other provisions
6823
Criminal penalty
6822
Administrative enforcement
6821
Privacy protection for customer information
6824
Relation to State laws
Requires all financial institutions to design,
implement and maintain safeguards to
protect customer information.
HIPAA requires every provider who does
business electronically to use the same
health care transactions, code sets, and
identifiers. HIPAA has identified TEN
standard transactions for Electronic Data
Interchange (EDI)
Authored by; Jason P. Rusch - CISSP, CISM, CISA | www.infosec-rusch.com | jason@infosec-rusch.com
6825
Agency guidance
6826
Reports
6827
Definitions
TITLE 15
Chapter 94
Subsection II
FRAUDULENT ACCESS TO
FINANCIAL INFORMATION
Subsection I
DISCLOSURE OF NONPUBLIC
PERSONAL INFORMATION
TITLE 15
Chapter 94
1 PROVISION