The FTC’s Sweeping Changes to the Safeguards Rule – Time to Reexamine Your Information Security Program

On October 27th, the FTC finalized its long-awaited updates to the Safeguards Rule, which requires a financial institution to maintain a comprehensive written information security program appropriate to the characteristics of the business, its activities, and its customer information.