The Safeguards Rule, as directed by the Gramm-Leach-Bliley Act (GLB), requires each financial institution to develop a written information security program that is appropriate to its size and complexity, the nature and scope of its activities, and the sensitivity of the customer information at issue. The Commission believes that the rule strikes an appropriate balance between allowing flexibility to financial institutions and establishing standards for safeguarding customer information that are consistent with GLB's requirements.

As part of its ongoing systematic review of all Federal Trade Commission rules and guides, in Spring 2015 the Commission plans to request public comments on, among other things, the economic impact and benefits of the rule; possible conflict between the rule and State, local, or other Federal laws or regulations; and the effect on the rule of any technological, economic, or other industry changes.