Encryption is not an explicit GLBA requirement, but Section 501(b) of the GLBA states that financial institutions must take the necessary measures to ensure the security and confidentiality of non-public customer information. Encrypting sensitive data is an industry best practice and can help financial enterprises to prevent unauthorized access to data.
Find out the 3 reasons why your company needs encryption.