16 CFR §314.6 — Exceptions (FTC GLBA Safeguards Rule)
16 CFR §314.6 establishes a small-institution exception for the written-risk-assessment-contents, continuous-monitoring-or-pen-test, incident-response plan, and annual-board-reporting requirements where customer information is maintained on fewer than 5,000 consumers.
Verbatim regulatory text
Verbatim provisions from 16 CFR §314.6 — Exceptions (FTC GLBA Safeguards Rule) — each quote is a verified substring of the regulator-published source snapshot, not retyped. Quoted for reference; this is not legal advice. The operational layer (P&P updates, prompts) lives in the regulation update kits.
16 CFR §314.6
Section 314.4(b)(1), (d)(2), (h), and (i) do not apply to financial institutions that maintain customer information concerning fewer than five thousand consumers. [86 FR 70308, Dec. 9, 2021]
Get this regulation in your AI window
Put the verbatim text and its effective date in front of your assistant, instead of whatever it remembers.
Add to Claude shows the one-time setup: paste one address, no account with us. Add to ChatGPT adds the free C4C app from ChatGPT’s app directory. Either way it’s free.
Get notified if this rule changes
One email when 16 CFR §314.6 — Exceptions (FTC GLBA Safeguards Rule) changes: what changed, the new verbatim text, and the effective date. Nothing else.
Double opt-in: we send a confirmation link first. Following one section does not subscribe you to anything else. Privacy.
Source of record: https://claudeforcompliance.com/regs/glba-safeguards-16cfr-314-6/
· register glba-safeguards-16cfr-314-6 · verbatim, source-snapshotted regulator text from the
Claude for Compliance corpus. To work from every register at once, download the corpus
and follow the methodology.