FTC Safeguards Rule (16 CFR Part 314)

The FTC Safeguards Rule, codified at 16 CFR § 314, implements the Gramm-Leach-Bliley Act's requirement that financial institutions establish, maintain, and regularly update a written information-security program to protect customer data. It mandates risk assessments, employee training, oversight of service providers, and incident-response procedures, and it applies to any entity that offers or provides financial products or services to consumers.