{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/glba/program",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/us/agent/glba/program)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-15",
    "fingerprint": "ewai:eu:8b5b8a",
    "proof": "sha256:932667e00efe850f926f414bad849dcee625842d1c94a0aca0abeffb77a5482b",
    "jurisdiction": "eu"
  },
  "brand_source": "Source: NovaCopilot",
  "layer": "us-agent-section",
  "agent": "glba",
  "slug": "program",
  "title": "Information security program",
  "reference": "16 CFR 314.4(a)",
  "scope": "A written programme with a named qualified individual responsible for it.",
  "rule": "glba-safeguards-rule",
  "identifier": "16 CFR Part 314",
  "jurisdiction_scope": [
    "federal"
  ],
  "risk_dimensions": [
    "privacy",
    "security",
    "financial"
  ],
  "tier": 1,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "official_source": "https://www.ecfr.gov/current/title-16/section-314.4",
  "register_source": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-314",
  "cited_by": [
    {
      "ruleId": "glba-program",
      "code": "glba-program-missing",
      "title": "Skriftligt informationssäkerhetsprogram saknas",
      "titleEn": "The written information security program is absent",
      "verdict": "förbjudet",
      "audit": "KRAV_GÄLLER",
      "obligation": "16 CFR 314.3(a) kräver ett skriftligt informationssäkerhetsprogram som är anpassat till verksamhetens storlek, komplexitet och de uppgifter som hanteras.",
      "obligationEn": "16 CFR 314.3(a) requires a written information security program appropriate to the size and complexity of the activity and the information handled."
    },
    {
      "ruleId": "glba-qualified",
      "code": "glba-qualified-missing",
      "title": "Ansvarig för programmet är inte utsedd",
      "titleEn": "No qualified individual is designated",
      "verdict": "risk",
      "audit": "KRAV_GÄLLER",
      "obligation": "16 CFR 314.4(a) kräver att en kvalificerad person utses att ansvara för programmet, och 16 CFR 314.4(i) kräver rapportering till styrelsen eller motsvarande.",
      "obligationEn": "16 CFR 314.4(a) requires designating a qualified individual responsible for the program, and 16 CFR 314.4(i) requires reporting to the board or equivalent."
    },
    {
      "ruleId": "glba-base",
      "code": "glba-base",
      "title": "Regeln gäller, med undantag för mindre innehav",
      "titleEn": "The rule applies, with the exemption for smaller holdings",
      "verdict": "risk",
      "audit": "KRAV_VILLKORAT",
      "obligation": "16 CFR 314.1 anger tillämpningsområdet för finansiella institut under myndighetens tillsyn. 16 CFR 314.6 undantar den som hanterar uppgifter om färre än 5 000 kunder från vissa delar av 314.4.",
      "obligationEn": "16 CFR 314.1 states the scope for financial institutions under the Commission's jurisdiction. 16 CFR 314.6 exempts those maintaining information on fewer than 5,000 customers from parts of 314.4."
    }
  ],
  "checked_at": "2026-08-15",
  "canonical": "https://legal.exploreworldai.com/us/agent/glba/program",
  "agent_canonical": "https://legal.exploreworldai.com/us/agent/glba",
  "hash": "sha256:932667e00efe850f926f414bad849dcee625842d1c94a0aca0abeffb77a5482b",
  "citation": "16 CFR Part 314, GLBA, Finanssekretess och kunddata. NovaCopilot, https://legal.exploreworldai.com/us/agent/glba (hämtad 2026-08-15, bevis sha256:2317b555fb86fa1c, bygge legal-2026-10-15).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "version": "legal-2026-10-15",
  "expires": "2026-10-16T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-15+legal-2026-10-15+2026-10-15T16:20:09",
    "content_hash": "sha256:932667e00efe850f926f414bad849dcee625842d1c94a0aca0abeffb77a5482b",
    "revalidate_after": "2026-10-15T17:25:18.438Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "content_notice": {
    "legal_advice": false,
    "nature": "Källregister. Endast information, inte juridisk rådgivning och ingen bedömning av ett enskilt ärende.",
    "kinds": {
      "official_text": "Officiell källtext, ordagrann och ej tolkad",
      "summary": "Sammanfattning, ej juristgranskad. Läs alltid källtexten",
      "classification": "Automatisk märkning ur källans egen text, ej juristgranskad"
    },
    "rule": "Endast fält märkta official_text är lagens egen lydelse. Allt annat pekar på den.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}