---
title: "16 CFR 314.3 GLBA: Standards for safeguarding customer information"
canonical: "https://dposchool.com/glba/section/314.3"
source: "https://www.ecfr.gov/current/title-16/section-314.3"
source_note: "Source: United States Code, title 15, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 12, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. Source: Electronic Code of Federal Regulations (eCFR), title 16, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR."
text_as_of: "2026-10-29"
language: "en"
publisher: "DPO School"
---

16 CFR 314.3 GLBA · Part 314: STANDARDS FOR SAFEGUARDING CUSTOMER INFORMATION

# 16 CFR 314.3 GLBA: Standards for safeguarding customer information

eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.

## Official text

### 16 CFR 314.3(a)

**(a)** Information security program. You shall develop, implement, and maintain a comprehensive information security program that is written in one or more readily accessible parts and contains administrative, technical, and physical safeguards that are appropriate to your size and complexity, the nature and scope of your activities, and the sensitivity of any customer information at issue. The information security program shall include the elements set forth in § 314.4 and shall be reasonably designed to achieve the objectives of this part, as set forth in paragraph (b) of this section.

### 16 CFR 314.3(b)

**(b)** Objectives. The objectives of section 501(b) of the Act, and of this part, are to:

#### 16 CFR 314.3(b)(1)

**(1)** Insure the security and confidentiality of customer information;

#### 16 CFR 314.3(b)(2)

**(2)** Protect against any anticipated threats or hazards to the security or integrity of such information; and

#### 16 CFR 314.3(b)(3)

**(3)** Protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer.

## Source

Source: Electronic Code of Federal Regulations (eCFR), title 16, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR.

Source credit: \[67 FR 36493, May 23, 2002, as amended at 86 FR 70307, Dec. 9, 2021\]

[16 CFR 314.3 on eCFR](https://www.ecfr.gov/current/title-16/section-314.3)

eCFR, up to date as of 29 October 2026. Retrieved 30 October 2026.

This is reference material, not legal advice.

## Navigation

[GLBA Navigator](https://dposchool.com/glba) / 16 CFR 314.3

Previous: [16 CFR 314.2 GLBA: Definitions](https://dposchool.com/glba/section/314.2)

Next: [16 CFR 314.4 GLBA: Elements](https://dposchool.com/glba/section/314.4)

## For AI agents

- Machine-readable index: https://dposchool.com/glba/llms.txt
- JSON API: https://dposchool.com/glba/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents