---
title: "15 U.S.C. 6801 GLBA: Protection of nonpublic personal information"
canonical: "https://dposchool.com/glba/section/6801"
source: "https://uscode.house.gov/us/usc/119-136/t15/s6801/"
source_note: "Source: United States Code, title 15, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced. Source: Electronic Code of Federal Regulations (eCFR), title 12, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR. Source: Electronic Code of Federal Regulations (eCFR), title 16, up to date as of 29 October 2026, from the eCFR API (ecfr.gov). The eCFR is an editorial compilation of the CFR and Federal Register amendments, not an official legal edition of the CFR."
text_as_of: "2026-10-22"
language: "en"
publisher: "DPO School"
---

15 U.S.C. 6801 GLBA · Chapter 94: PRIVACY

# 15 U.S.C. 6801 GLBA: Protection of nonpublic personal information

United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026.

## Official text

### 15 U.S.C. 6801(a)

**(a)** Privacy obligation policy

It is the policy of the Congress that each financial institution has an affirmative and continuing obligation to respect the privacy of its customers and to protect the security and confidentiality of those customers’ nonpublic personal information.

### 15 U.S.C. 6801(b)

**(b)** Financial institutions safeguards

In furtherance of the policy in subsection (a), each agency or authority described in section 6805(a) of this title, other than the Bureau of Consumer Financial Protection, shall establish appropriate standards for the financial institutions subject to their jurisdiction relating to administrative, technical, and physical safeguards⁠—

#### 15 U.S.C. 6801(b)(1)

**(1)** to insure the security and confidentiality of customer records and information;

#### 15 U.S.C. 6801(b)(2)

**(2)** to protect against any anticipated threats or hazards to the security or integrity of such records; and

#### 15 U.S.C. 6801(b)(3)

**(3)** to protect against unauthorized access to or use of such records or information which could result in substantial harm or inconvenience to any customer.

## Source

Source: United States Code, title 15, published by the Office of the Law Revision Counsel of the U.S. House of Representatives (uscode.house.gov), release point 119-136. The editorial and statutory notes are not reproduced.

Source credit: ( Pub. L. 106-102, title V, § 501 , Nov. 12, 1999 , 113 Stat. 1436 ; Pub. L. 111-203, title X, § 1093(1) , July 21, 2010 , 124 Stat. 2095 .)

[15 U.S.C. 6801 on the Office of the Law Revision Counsel](https://uscode.house.gov/us/usc/119-136/t15/s6801/)

United States Code, current through Public Law 119-136 (October 22, 2026). Retrieved 30 October 2026.

This is reference material, not legal advice.

## Navigation

[GLBA Navigator](https://dposchool.com/glba) / 15 U.S.C. 6801

Next: [15 U.S.C. 6802 GLBA: Obligations with respect to disclosures of personal information](https://dposchool.com/glba/section/6802)

## For AI agents

- Machine-readable index: https://dposchool.com/glba/llms.txt
- JSON API: https://dposchool.com/glba/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents