About GLBA Compliance

The Financial Modernization Act of 1999, also known as the "Gramm-Leach-Bliley Act" (GLBA) includes provisions to protect consumers' personal financial information held by financial institutions. Higher education institutions are subject to the provision of the GBLA statute related to the administrative, technical, and physical safeguarding of customer information.

Who Should Know This Information

Resources

Any employee, faculty, or staff responsible for protecting or managing consumers’ personal financial information or who have access to consumers’ personal financial information.

Awareness and Training

All University employees that interact with the covered consumer data during their daily activities are required to complete the GLBA Compliance training course. Managers and supervisors are responsible for determining which positions are applicable. GLBA Awareness and Compliance Training is available in REBELearn. Training is mandatory and should be completed within 30 days of individuals serving in applicable roles and, thereafter, on an annual basis. Supervisors can request that employees be enrolled in the REBELearn training by emailing qafc@unlv.edu.

Responsibilities

UNLV has adopted an information security program to assure compliance with GLBA provisions for safeguarding customer information. The FTC’s regulations require that the information security program contains administrative, technical, and physical safeguards that are appropriate to the size and complexity of the institution or servicer, the nature and scope of their activities, and the sensitivity of any student information. Key initiatives of the program include:

  • Designating a qualified individual responsible for overseeing and implementing the University’s information security program and enforcing the information security program.
  • Identifying risks to the security of customer information (including a risk management of computer information systems).
  • Contractually requiring service providers to implement and maintain safeguards.

Additional GLBA initiatives include:

  • Annual GLBA awareness training
  • Conducting periodic GLBA risk assessments

  • Units that collect or utilize customer financial information are represented by executive leaders on the GLBA Oversight Team. Examples include units that:
    • Administer financial aid
    • Process credit card information
  • Each university unit has a functional lead represented on GLBA Committee to manage safeguards and practices for their unit.
  • University units periodically:
    • Assess their current customer information practices
    • Identify vulnerabilities
    • Take appropriate measures to secure customer information

This committee meets periodically to discuss current and emerging issues related to GLBA - Student Information Security.

Members

  • Kivanc Oner, Information Technology
  • John Dudley,  Information Technology
  • Kate Korgan, Ph.D., Academic Affairs
  • Barb Roberts, Academic Affairs
  • Zack Goodwin, Financial Aid
  • Lori Church, Controller's Office
  • Joe Sunbury, Business Affairs
  • Alexandra Nikolich, Business Affairs