Law note · United States
GLBA Safeguards Rule Breach Notification Amendment
cite 16 CFR Section 314.4(j)
stage In effect
since 2024-05-13
reviewed 2026-08-23
Requires a financial institution covered by the FTC's Safeguards Rule to notify the FTC as soon as possible, and no later than 30 days after discovery, of a security event involving unauthorized acquisition of unencrypted customer information affecting 500 or more consumers.
What it asks of an app
- Notify the FTC within 30 days of discovering a security event that has compromised unencrypted customer information for 500 or more consumers.
When LexLint raises it
Declared activities: high_risk_decisions
Primary source: eCFR, current regulatory text, 16 CFR Section 314.4(j)