top of page

FTC Safeguards Rule Compliance

shutterstock_2064550976.jpg

The FTC Safeguards Rule requires financial institutions under their jurisdiction to have a qualified individual that develops, implements, and maintains an information security program to protect customer information.

Is your business required to comply with the FTC Safeguards Rule?

You might be surprised.

The FTC Safeguards Rule covers any financial institution not already subject to enforcement by another regulator like the SEC or DOI. It essentially defines a "financial institution" as an organization engaged in activity that is "financial in nature" or "incidental to such financial activities."

What does that mean? Well, if you're handling customer information in relation to financial matters, you are probably considered a "financial institution" and need to comply with the FTC Safeguards Rule.

Examples include:

Mortgage Brokers & Lenders
Collection Agencies
Tax Firms & CPAs
Credit Unions (Non-NCUA)
Auto & Powersports Dealers
Investment Advisors (Non-SEC)

...and more​​

What does that mean for you?

Entoo Security can design, implement, and manage your security program. 

Unless you’re a larger organization, you probably don’t have a team in place to do everything required by the FTC Safeguards Rule.   


Entoo Security understands how to comply and can serve as the qualified individual building and running your program.

 

We’ve designed a comprehensive, cost-effective blueprint that scales with your business, making compliance both simple and sustainable.

Ready to learn more?

Schedule a free consultation. 

What type of Financial Institution are you?
Do you currently have a qualified individual overseeing your security program?
Yes
No
Do you have a written information security plan (WISP) in place?
Yes
No
bottom of page