With identity theft a widespread issue in the financial services industry, banks and ARM companies are under increased pressure to ensure consumers’ sensitive identification, contact, and financial information is kept safe. In fact, a number of recent state and federal laws and regulations codify certain requirements for handling financial data. Firms in the ARM industry must adhere to a host of standards, including the Payment Card Industry Data Security Standard (PCI DSS), the financial privacy and safeguards rules in the Gramm–Leach–Bliley Act (GLBA), the FTC’s Red Flags Rule for identity theft, information security standard ISO 27002, HIPAA and the HITECH Act for the healthcare sector, and the Federal Information Security Management Act of 2002 (FISMA) for those collecting on government contracts. Auditing standard SAS 70 is also required for many in the financial services industry that use outside vendors such as debt collection agencies.

See all Topics
 [Image by creator Alexander from AdobeStock]

NYDFS cybersecurity regulations to take effect on November 1

1 November 2024

Person with pen making a checkmark in a box [Image by creator peshkova from AdobeStock]

insideARM Weekly Recap – Week of July 15th, 2024

22 July 2024

 [Image by creator Drobot Dean from AdobeStock]

insideARM Weekly Recap – Week of July 8th, 2024

15 July 2024

 [Image by creator Alexander from AdobeStock]

Pennsylvania Amends Data Breach Notification Law

11 July 2024

 [Image by creator Andy Dean from AdobeStock]

Rhode Island Enacts Haphazard Customer Data Privacy Law

3 July 2024

 [Image by creator Andy Dean from AdobeStock]

Minnesota Becomes 18th State to Enact Comprehensive Consumer Data Privacy Law

12 June 2024

 [Image by creator James Steidl from AdobeStock]

insideARM Weekly Recap- Week of May 6th, 2024

13 May 2024

Microphone sitting on table [Image by creator olegkruglyak3 from AdobeStock]

CFPB Bites of the Month - April 2024 - Won't Get Fooled Again, CFPB

8 May 2024

Illustration of a map of united states in blue [Image by creator smarques27 from AdobeStock]

Nebraska Becomes 16th State to Enact Comprehensive Consumer Data Privacy Law

7 May 2024

 [Image by creator Andy Dean from AdobeStock]

Kentucky Becomes 15th State to Enact a Comprehensive Consumer Data Privacy Law

17 April 2024

 [Image by creator Andy Dean from AdobeStock]

New Hampshire Enacts Comprehensive Consumer Data Privacy Law

13 March 2024

 [Image by creator Alexander from AdobeStock]

New Jersey Enacts Comprehensive Consumer Data Privacy Law

29 January 2024

 [Image by creator Alexander from AdobeStock]

Data Privacy & Security Roundup: New Laws, Regulations and Important Dates in 2024

9 January 2024

 [Image by creator Alexander from AdobeStock]

FTC Amends Safeguards Rule to Require Reporting of Data Breaches

7 November 2023

 [Image by creator Alexander from AdobeStock]

California Takes an Aggressive Approach to Regulating Data Brokers

25 October 2023

 [Image by creator Alexander from AdobeStock]

Delaware Enacts Personal Data Privacy Act

19 September 2023

 [Image by creator Andy Dean from AdobeStock]

Texas Enacts Data Privacy and Security Act with Small Business Exception

5 July 2023

 [Image by creator Alexander from AdobeStock]

A Closer Look at the Gramm-Leach-Bliley Act (GLBA): Updates to the Safeguards Rule

26 June 2023

 [Image by creator Andy Dean from AdobeStock]

Montana Enacts Comprehensive Consumer Data Privacy Law

30 May 2023

 [Image by creator Andy Dean from AdobeStock]

‘Tennessee Information Protection Act’ with NIST Security Standards Enacted

24 May 2023