Comments to the final California Consumer Privacy Act regulations asked if the CCPA carve-out regarding the Gramm Leach Bliley Act (GLBA), the data protection law governing US financial institutions, applies to:
- Financial institutions under GLBA
- Service providers that must comply with GLBA
- Sources of information that are subject to GLBA
The California Attorney General’s Answer: No.
The exemption does not extend to entities subject to GLBA , nor to sources subject to GLBA. Rather, it applies to personal information collected, processed, sold or disclosure pursuant to GLBA (or California Financial Information Privacy Act (CFIPA).
