Updates to the Gramm-Leach-Bliley Act Cybersecurity Requirements | Knowledge Center
On December 9, 2021, the Federal Trade Commission (FTC) issued final regulations (Final Rule) to amend the Standards for Safeguarding Customer Information (Safeguards Rule), an important component of the Gramm-Leach-Bliley Act’s (GLBA) requirements for protecting the privacy and personal information of consumers. The effective date for most of the changes to the Safeguards Rule is June 9, 2023. This Electronic Announcement provides a summary of the changes to the GLBA requirements resulting from the Final Rule, explains the impacts of the changes on postsecondary institutions, and describes changes to the Department of Education’s (Department) enforcement of the GLBA requirements. Institutions should coordinate with their leadership and appropriate staff to implement the requirements in the Final Rule by June 9. Postsecondary institutions and third-party servicers must protect student financial aid information provided to them by the Department or otherwise obtained in support of the a
Posted Date February 09, 2023 Author Federal Student Aid Electronic Announcement ID GENERAL-23-09 Subject Updates to the Gramm-Leach-Bliley Act Cybersecurity Requirements On December 9, 2021, the Federal Trade Commission (FTC) issued final regulations (Final Rule) to amend the Standards for Safeguarding Customer Information (Safeguards Rule), an important component of the Gramm-Leach-Bliley Act’s (GLBA) requirements for protecting the privacy and personal information of consumers. The effective date for most of the changes to the Safeguards Rule is June 9, 2023. This Electronic Announcement pr
related reading
- App Developers: Start with Securityftc.gov
- California’s Data Deletion Law Imposes a Host of New Obligations on Data Brokers | Insights | Skadden, Arps, Slate, Meagher & Flom LLPskadden.com
- The New Japanese Privacy Law: What Businesses Need to Knowauth0.com
- Phone bill privacy rules highlight tech hurdles for domestic violence survivorsemergingtechbrew.com
- SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companiessec.gov
- Product Security Bad Practicescisa.gov
- Data Protection Laws and Regulations Report 2025 - 2026 Australiaiclg.com
- Virginia Bans Sale of Geolocation Datahunton.com
- What is PCI DSS compliance? | Stripestripe.com
- Bill Text - SB-253 Climate Corporate Data Accountability Act.leginfo.legislature.ca.gov
- Personal Data Protection Act - Article Content - Laws & Regulations Database of The Republic of China (Taiwan)law.moj.gov.tw
- Thai_of_the_personal_data_protection_act_0.pdfdataguidance.com