The Safeguards Rule, as directed by the Gramm-Leach-Bliley Act (GLB), requires each financial institution subject to the FTC's jurisdiction to develop a written information security program that is appropriate to its size and complexity, the nature and scope of its activities, and the sensitivity of the customer information at issue. The Commission believes that the rule strikes an appropriate balance between allowing flexibility to financial institutions and establishing standards for safeguarding customer information that are consistent with GLB's requirements.

As part of its ongoing systematic review of all Federal Trade Commission rules and guides, on September 7, 2016, the Commission requested public comments on, among other things, the economic impact and benefits of the rule; possible conflict between the rule and State, local, or other Federal laws or regulations; and the effect on the rule of any technological, economic, or other industry changes. 81 FR 61632. The comment period will close on November 7, 2016.