Comments to the final California Consumer Privacy Act regulations asked if the  CCPA carve-out regarding the Gramm Leach Bliley Act (GLBA), the data protection law governing US financial institutions, applies to:

  1. Financial institutions under GLBA
  2. Service providers that must comply with GLBA
  3. Sources of information that are subject to GLBA
The California Attorney General’s Answer: No.

The exemption does not extend to entities subject to GLBA , nor to sources subject to GLBA. Rather, it applies to personal information collected, processed, sold or disclosure pursuant to GLBA (or California Financial Information Privacy Act (CFIPA).

CCPA Final Regs CCPA and GLBA Odia Kagan