The Gramm-Leach-Bliley Act (GLBA) is a federal law that requires financial institutions to protect customer information by implementing safeguards for their data assets. This includes administrative, technical, and physical security measures to protect customers' personal information.