The Safeguards Rule, as directed by the Gramm-Leach-Bliley Act (GLB), requires each financial institution subject to the FTC's jurisdiction to develop a written information security program to keep customer information secure that is appropriate to its size and complexity, the nature and scope of its activities, and the sensitivity of the customer information at issue. Companies covered by the Rule are also responsible for taking steps to ensure that their service providers safeguard customer information in their care. The Commission believes that the rule strikes an appropriate balance between allowing flexibility to financial institutions and establishing standards for safeguarding customer information that are consistent with GLB's requirements. 

As part of its ongoing systematic review of all Federal Trade Commission rules and guides, on September 7, 2016, the Commission requested public comments on, among other things, the economic impact and benefits of the rule; possible conflict between the rule and State, local, or other Federal laws or regulations; and the effect on the rule of any technological, economic, or other industry changes. 81 FR 61632. The comment period closed on November 7, 2016. Staff anticipates that the Commission will take its next action by June 2018.