§ 314.3. Standards for safeguarding customer information.
169 words·~1 min read·
/us/cfr/t16/s§ 314.3·A research copy — for the controlling text, always check the official state or federal source. Not legal advice.
(a)Information security program. You shall develop, implement, and maintain a comprehensive information security program that is written in one or more readily accessible parts and contains administrative, technical, and physical safeguards that are appropriate to your size and complexity, the nature and scope of your activities, and the sensitivity of any customer information at issue. The information security program shall include the elements set forth in § 314.4 and shall be reasonably designed to achieve the objectives of this part, as set forth in paragraph
(b)of this section.
(b)Objectives. The objectives of section 501(b) of the Act, and of this part, are to:
(1)Insure the security and confidentiality of customer information;
(2)Protect against any anticipated threats or hazards to the security or integrity of such information; and
(3)Protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer. \[67 FR 36493, May 23, 2002, as amended at 86 FR 70307, Dec. 9, 2021\]
Connections23 cite this
Cited by 23 sections · top 11
register
- Proposed RulesProposed rule
- NoticesRequest for public comment
- NoticesFinal rule
- NoticesPublic workshop and request for public comment
- NoticesProposed rule
- NoticesPostponement and change of format of public workshop; extension of deadlines for submission of comments and requests to participate
- Rules and RegulationsProposed rule, request for comment
- Rules and RegulationsFinal rule
- Proposed RulesProposed rule
- Proposed RulesNotice of proposed rulemaking; request for public comment
- Rules and RegulationsFinal rule
Citation graph
cites case law
§ 314.3
Standards for safeguarding customer information.
Fed. Reg.×23
Cites 0Cited by 23 across 1 source