{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/us/agent/glba/program",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-08-25",
    "proof": "sha256:f2db973867306d76a619f9bd15a69bb96e5b1420417b6f8d2349d555840e9d1f",
    "jurisdiction": "eu"
  },
  "layer": "us-agent-section",
  "agent": "glba",
  "slug": "program",
  "title": "Information security program",
  "reference": "16 CFR 314.4(a)",
  "scope": "A written programme with a named qualified individual responsible for it.",
  "rule": "glba-safeguards-rule",
  "identifier": "16 CFR Part 314",
  "jurisdiction_scope": [
    "federal"
  ],
  "risk_dimensions": [
    "privacy",
    "security",
    "financial"
  ],
  "tier": 1,
  "deterministic": true,
  "llm_used": false,
  "verdict_kind": "machine-classification",
  "official_source": "https://www.ecfr.gov/current/title-16/section-314.4",
  "register_source": "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-314",
  "cited_by": [
    {
      "ruleId": "glba-program",
      "code": "glba-program-missing",
      "title": "Skriftligt informationssäkerhetsprogram saknas",
      "titleEn": "The written information security program is absent",
      "verdict": "förbjudet",
      "audit": "KRAV_GÄLLER",
      "obligation": "16 CFR 314.3(a) kräver ett skriftligt informationssäkerhetsprogram som är anpassat till verksamhetens storlek, komplexitet och de uppgifter som hanteras.",
      "obligationEn": "16 CFR 314.3(a) requires a written information security program appropriate to the size and complexity of the activity and the information handled."
    },
    {
      "ruleId": "glba-qualified",
      "code": "glba-qualified-missing",
      "title": "Ansvarig för programmet är inte utsedd",
      "titleEn": "No qualified individual is designated",
      "verdict": "risk",
      "audit": "KRAV_GÄLLER",
      "obligation": "16 CFR 314.4(a) kräver att en kvalificerad person utses att ansvara för programmet, och 16 CFR 314.4(i) kräver rapportering till styrelsen eller motsvarande.",
      "obligationEn": "16 CFR 314.4(a) requires designating a qualified individual responsible for the program, and 16 CFR 314.4(i) requires reporting to the board or equivalent."
    },
    {
      "ruleId": "glba-base",
      "code": "glba-base",
      "title": "Regeln gäller, med undantag för mindre innehav",
      "titleEn": "The rule applies, with the exemption for smaller holdings",
      "verdict": "risk",
      "audit": "KRAV_VILLKORAT",
      "obligation": "16 CFR 314.1 anger tillämpningsområdet för finansiella institut under myndighetens tillsyn. 16 CFR 314.6 undantar den som hanterar uppgifter om färre än 5 000 kunder från vissa delar av 314.4.",
      "obligationEn": "16 CFR 314.1 states the scope for financial institutions under the Commission's jurisdiction. 16 CFR 314.6 exempts those maintaining information on fewer than 5,000 customers from parts of 314.4."
    }
  ],
  "checked_at": "2026-08-15",
  "canonical": "https://legal.exploreworldai.com/us/agent/glba/program",
  "agent_canonical": "https://legal.exploreworldai.com/us/agent/glba",
  "hash": "sha256:f2db973867306d76a619f9bd15a69bb96e5b1420417b6f8d2349d555840e9d1f",
  "citation": "16 CFR Part 314, GLBA, Finanssekretess och kunddata. ExploreWorld Legal, https://legal.exploreworldai.com/us/agent/glba (hämtad 2026-08-15, bevis sha256:1df7b9908c124522, bygge legal-2026-08-25).",
  "disclaimer": "Källhänvisning med officiell identifierare. Ingen juridisk rådgivning och inget efterlevnadsbeslut.",
  "version": "legal-2026-08-25",
  "expires": "2026-08-31T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-08-25+legal-2026-08-25+2026-08-25T10:00:00",
    "content_hash": "sha256:f2db973867306d76a619f9bd15a69bb96e5b1420417b6f8d2349d555840e9d1f",
    "revalidate_after": "2026-08-30T06:51:33.094Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; live-fetch-per-answer; attribution-required; no-derived-index",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}