View Rule

The Safeguards Rule, as directed by the Gramm-Leach-Bliley (GLB) Act, requires each financial institution subject to the FTC's jurisdiction to develop a written information security program to keep customer information secure that is appropriate to its size and complexity, the nature and scope of its activities, and the sensitivity of the customer information at issue. Companies covered by the rule are also responsible for taking steps to ensure that their service providers safeguard customer information in their care. The Commission believes that the rule strikes an appropriate balance between allowing financial institutions flexibility and establishing standards for safeguarding customer information that are consistent with GLB's requirements. 

As part of its ongoing systematic review of all rules and guides, on September 7, 2016, the Commission requested public comments on, among other things, the economic impact and benefits of the rule; possible conflict between the rule and State, local, or other Federal laws or regulations; and the effect on the rule of any technological, economic, or other industry changes. 81 FR 61632. The comment period closed on November 7, 2016. On March 5, 2019, the Commission announced a notice of proposed rulemaking. 84 FR 13158 (April 4, 2019). The public comment period as extended closed on August 2, 2019. 84 FR 24049. Staff is reviewing approximately 50 comments that were submitted.