{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/us:glba-safeguards",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/us:glba-safeguards)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-09",
    "fingerprint": "ewai:se:899ed4",
    "proof": "sha256:8da7d8c2346611ebb301b60c73dcbfc3b26377a539186ec61cb2995bdf99e2bb",
    "jurisdiction": "se",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "documentation_requirement",
  "object_id": "documentation_requirement:us:glba-safeguards",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/documentation_requirement",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/us:glba-safeguards",
  "source": "NovaCopilot",
  "item": {
    "subject": "us:glba-safeguards",
    "act": "glba-safeguards",
    "article": null,
    "requirements": [
      {
        "kind": "policy",
        "role": "financial-institution",
        "provision": "glba-safeguards 314.3",
        "retention": null,
        "obligation": "obligation:us:glba-safeguards-art-314-3-financial-institution"
      },
      {
        "kind": "impact_assessment",
        "role": "financial-institution",
        "provision": "glba-safeguards 314.4",
        "retention": null,
        "obligation": "obligation:us:glba-safeguards-art-314-4-financial-institution"
      }
    ],
    "status": "ready",
    "reason": null,
    "details": [
      {
        "kind": "policy",
        "label": "Written policy or plan",
        "role": "financial-institution",
        "provision": "glba-safeguards 314.3",
        "retention": null,
        "from_duty": "Develop, implement and maintain a comprehensive written information security program (institutions with fewer than 5,000 consumer records are exempt from parts of 314.4 under 314.6) with administrative, technical and physical safeguards for customer information.",
        "source": "16 CFR 314.3 (GLBA Safeguards Rule)",
        "source_url": "https://www.ecfr.gov/current/title-16/section-314.3",
        "obligation": "obligation:us:glba-safeguards-art-314-3-financial-institution"
      },
      {
        "kind": "impact_assessment",
        "label": "Impact or risk assessment",
        "role": "financial-institution",
        "provision": "glba-safeguards 314.4",
        "retention": null,
        "from_duty": "Designate a qualified individual, base the program on a written risk assessment, apply required controls, report to the board annually and notify the FTC of a notification event involving at least 500 consumers.",
        "source": "16 CFR 314.4 (GLBA Safeguards Rule)",
        "source_url": "https://www.ecfr.gov/current/title-16/section-314.4",
        "obligation": "obligation:us:glba-safeguards-art-314-4-financial-institution"
      }
    ],
    "method": "Fixed keyword rules on obligation duty text; first matching rule sets the kind. No match means not_in_register, never a guess.",
    "hash": "2a43ed03ca7b136d49dc638328d7777c75803f08898f8fed18d6b86d44f744bb"
  },
  "links": {
    "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/us:glba-safeguards",
    "case_law": {
      "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/us:glba-safeguards",
      "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/us:glba-safeguards"
    },
    "evidence": {
      "provenance": null,
      "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify",
      "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/us:glba-safeguards?view=compact",
    "representations": {},
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "us:glba-safeguards"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=us",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "hash": "sha256:8da7d8c2346611ebb301b60c73dcbfc3b26377a539186ec61cb2995bdf99e2bb",
  "version": "legal-2026-10-09",
  "expires": "2026-10-10T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-09+legal-2026-10-09+2026-10-09T19:43:29",
    "content_hash": "sha256:8da7d8c2346611ebb301b60c73dcbfc3b26377a539186ec61cb2995bdf99e2bb",
    "revalidate_after": "2026-10-09T21:20:06.163Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/us:glba-safeguards",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}