Framework hub

FTC Safeguards

The FTC Safeguards Rule matters for US financial-in-nature products that handle customer information, including some fintech, lending, advisory, tax, and account-servicing workflows.

Focus 1

Builder trigger

Check this when the product handles customer financial information or supports a business activity that may be financial in nature under GLBA.

Focus 2

Security program

The rule points builders toward written security programs, risk assessments, access controls, encryption, app assessment, MFA, change management, monitoring, and incident response.

Focus 3

Breach notification

The FTC amended the rule to require certain breach and security-incident reporting, with notification requirements taking effect in May 2024.

Focus 4

Official FTC guide

Use the FTC guide and the rule text to decide whether your activity is covered and what security program elements apply.

Open related page

Source updates

MEDIUMFederal Register2026-07-20

Board of Directors; Request for Nomination

The Unified Carrier Registration (UCR) Plan Board of Directors is requesting nominations of qualified individuals from the motor carrier industry for consideration by the Federal Motor...

US federal regulationFTC Safeguards
MEDIUMFederal Register2026-07-02

Privacy Act of 1974; Matching Program

In accordance with the Privacy Act of 1974, as amended, the Department of Housing and Urban Development (HUD) and the Small Business Administration (SBA) are providing notice of a new...

US federal regulationFTC SafeguardsAustralian Privacy Act
URGENTESMA2026-07-02

Moody’s Germany fined EUR 2,145,000 for misreporting to ESMA

The European Securities and Markets Authority (ESMA), the EU’s financial markets regulator and supervisor, has fined Moody’s Deutschland GmbH (Moody’s Germany) a total of EUR 2,145,000, for...

DORAMiCACyber Resilience ActFTC Safeguards