The Gramm–Leach–Bliley Act (GLBA) is a U.S law that mandates the disclosure of customer data collection practices for organizations selling financial products and/or services.
What is the Gramm–Leach–Bliley Act (GLBA)?
Key takeaways
GLBA compliance is mandatory for all U.S entities selling financial products and/or services.- The GLBA expects financial entities to establish security controls that protect customer data from compromise.
- Under the GLBA, financial entities must implement secure Privileged Access Management policies.
Reviewed by
No items found.
Author
Edward Kost
Reviewed by
See UpGuard In Action
Book a free, personalized onboarding call with one of our cybersecurity experts.
More from our blog
Learn more about the latest issues in cybersecurity.
The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management
The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management
UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why.
Cassy van Eeden
October 18, 2026
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.
We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four.
Cassy van Eeden
September 29, 2026
12 Cybersecurity Horror Stories of 2026 (No Costume Required)
12 Cybersecurity Horror Stories of 2026 (No Costume Required)
A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news.
.jpeg){kind=avatar}
Revashni Moodley
October 14, 2026
Sign up for our newsletter
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
Free instant security score
How secure is your organization?
