{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/glba/notification",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:83aad810065c2ff77f6b2bcdb35d1f0473842fae0881993e9f75ac68d59b25d8",
    "jurisdiction": "eu"
  },
  "layer": "us-agent-section",
  "agent": "glba",
  "slug": "notification",
  "title": "Notification of a security event",
  "reference": "16 CFR 314.5",
  "scope": "Notice to the agency when unencrypted customer information of 500 or more consumers is acquired without authorisation.",
  "rule": "glba-safeguards-rule",
  "identifier": "16 CFR Part 314",
  "jurisdiction_scope": [
    "federal"
  ],
  "risk_dimensions": [
    "privacy",
    "security",
    "financial"
  ],
  "tier": 1,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "official_source": "https://www.ecfr.gov/current/title-16/section-314.5",
  "register_source": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-314",
  "cited_by": [
    {
      "ruleId": "glba-small",
      "code": "glba-full",
      "title": "Alla delar av regeln gäller, inklusive riskbedömning och incidentplan",
      "titleEn": "The full rule applies, including risk assessment and incident response",
      "verdict": "risk",
      "audit": "KRAV_GÄLLER",
      "obligation": "16 CFR 314.6 undantar den som hanterar uppgifter om färre än 5 000 kunder från vissa delar. Vid 5 000 kunder eller fler gäller även skriftlig riskbedömning enligt 16 CFR 314.4(b), incidentplan enligt 314.4(h) och rapport till styrelsen enligt 314.4(i).",
      "obligationEn": "16 CFR 314.6 exempts those maintaining information on fewer than 5,000 customers from certain parts. At 5,000 customers or more the written risk assessment in 16 CFR 314.4(b), the incident response plan in 314.4(h) and the board report in 314.4(i) also apply."
    }
  ],
  "checked_at": "2026-08-15",
  "canonical": "https://legal.exploreworldai.com/us/agent/glba/notification",
  "agent_canonical": "https://legal.exploreworldai.com/us/agent/glba",
  "hash": "sha256:83aad810065c2ff77f6b2bcdb35d1f0473842fae0881993e9f75ac68d59b25d8",
  "citation": "16 CFR Part 314, GLBA, Finanssekretess och kunddata. ExploreWorld Legal, https://legal.exploreworldai.com/us/agent/glba (hämtad 2026-08-15, bevis sha256:1df7b9908c124522, bygge legal-2026-08-25).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "version": "legal-2026-08-25",
  "expires": "2026-08-31T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:83aad810065c2ff77f6b2bcdb35d1f0473842fae0881993e9f75ac68d59b25d8",
    "revalidate_after": "2026-08-30T06:52:54.923Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}