(a) Privacy obligation policy
It is the policy of the Congress that each financial institution has an affirmative and continuing obligation to respect the privacy of its customers and to protect the security and confidentiality of those customers’ nonpublic personal information.
(b) Financial institutions safeguardsIn furtherance of the policy in subsection (a), each agency or authority described in section 6805(a) of this title, other than the Bureau of Consumer Financial Protection, shall establish appropriate standards for the financial institutions subject to their jurisdiction relating to administrative, technical, and physical safeguards—
(Pub. L. 106–102, title V, § 501, Nov. 12, 1999, 113 Stat. 1436; Pub. L. 111–203, title X, § 1093(1), July 21, 2010, 124 Stat. 2095.)