{"page":"/blog/card-networks-glba-coverage","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Provision","What it says","Source"],"rows":[["15 U.S.C. § 6809(3)","The statute defines a financial institution by reference to financial activities under the Bank Holding Company Act.","Source text"],["12 CFR 225.28(b)(14)","The Federal Reserve rule lists processing and transmission activities involving specified financial, banking or economic data.","Source text"],["12 CFR 1016.1(b)","Regulation P identifies the financial institutions and persons within its scope.","Source text"],["16 CFR 314.1(b)","The Safeguards Rule covers customer information held by covered institutions, including information about customers of other financial institutions.","Source text"],["16 CFR 314.4(j)","The rule calls for notice to the Federal Trade Commission for a qualifying notification event.","Source text"],["12 CFR 1016.11","The disclosure route can limit a recipient’s reuse and redisclosure.","Source text"]],"sourceUrls":[["https://www.law.cornell.edu/uscode/text/15/6809"],["https://www.law.cornell.edu/cfr/text/12/225.28"],["https://www.consumerfinance.gov/rules-policy/regulations/1016/1/"],["https://www.law.cornell.edu/cfr/text/16/314.1"],["https://www.law.cornell.edu/cfr/text/16/314.4"],["https://www.consumerfinance.gov/rules-policy/regulations/1016/11/"]]}