What Does the Gramm-Leach-Bliley Act (GLBA) Require?

This document provides an overview of the Gramm-Leach-Bliley Act (GLBA), summarizing its Privacy, Safeguards, and Pretexting rules, the cybersecurity and vendor-risk obligations for financial institutions (including encryption, MFA, monitoring, risk assessments, and incident response), overlaps with other regulatory frameworks, enforcement and penalties, and guidance on aligning controls to standards such as NIST and ISO, with a mention of SecurityScorecard’s supply-chain risk solution.