Gramm-Leach-Bliley Act (GLBA)

The Gramm-Leach-Bliley Act (GLBA), includes provisions to protect consumers personal financial information held by financial institutions. Under GLBA it is the obligation of the University to establish appropriate standards for areas under its jurisdiction relating to administrative, technical, and physical safeguards.

RU Compliance Policy In Support of GLBA — last modified 2007-07-27 11:28

Rutgers University GLBA Policy

GLBA Security Program-Annual Report — last modified 2008-04-11 11:00

The designated departmental GLBA contact will report the status of the Information Security Program for covered data accessible in that unit to the Coordinator at least annually. To this end IP&S presented this questionaire for the 2006/2007 annual report.

GLBA Security Program-Planning — last modified 2007-07-27 11:28

Planning includes: 1. An inventory (Hardware, Software, Services, Data and Data flow) 2. Risk assessment

GLBA Security Program-Training — last modified 2007-07-27 11:28

Annual training is required of all staff who have access to GLBA covered data.

GLBA Security Program-Prevention — last modified 2007-07-27 11:28

 

GLBA Security Program-Detection — last modified 2007-07-27 11:28

GLBA requires that attempts to obtain access to covered data be recorded.

GLBA Security Program-Reaction/Recovery — last modified 2007-07-27 11:28

 

GLBA Security Program-Reporting — last modified 2007-07-27 11:28

 

GLBA Annual Report (Expanded) — last modified 2008-04-11 10:59

Here are sub-topics to be considered when creating your annual GLBA report.