16 CFR §314.6 — Exceptions (FTC GLBA Safeguards Rule)

glba-safeguards-16cfr-314-6

16 CFR §314.6 establishes a small-institution exception for the written-risk-assessment-contents, continuous-monitoring-or-pen-test, incident-response plan, and annual-board-reporting requirements where customer information is maintained on fewer than 5,000 consumers.

This register: .xlsx .csv

Verbatim regulatory text (1)

Verbatim provisions from 16 CFR §314.6 — Exceptions (FTC GLBA Safeguards Rule) — each quote is a verified substring of the regulator-published source snapshot, not retyped. Quoted for reference; this is not legal advice. The operational layer (P&P updates, prompts) lives in the regulation update kits.

16 CFR §314.6

Section 314.4(b)(1), (d)(2), (h), and (i) do not apply to financial institutions that maintain customer information concerning fewer than five thousand consumers. [86 FR 70308, Dec. 9, 2021]

Source: 16 CFR §314.6 · source URL · snapshot 2622fb44b5bdadaf

Get this regulation in your AI window

Put the verbatim text and its effective date in front of your assistant, instead of whatever it remembers.

Open in Claude Open in ChatGPT

Open in Claude shows the one-time setup: paste one address, no account with us. Open in ChatGPT asks ChatGPT about this page, with no setup. Either way it’s free.

Get notified if this rule changes

One email when 16 CFR §314.6 — Exceptions (FTC GLBA Safeguards Rule) changes: what changed, the new verbatim text, and the effective date. Nothing else.

Double opt-in: we send a confirmation link first. Following one section does not subscribe you to anything else. Privacy.

Source of record: https://claudeforcompliance.com/regs/glba-safeguards-16cfr-314-6/ · register glba-safeguards-16cfr-314-6 · verbatim, source-snapshotted regulator text from the Claude for Compliance corpus. To work from every register at once, download the corpus and follow the methodology.