The Datamax Thinking Blog

Educating, collaborating, and sparking ideas for maximizing the technology that matters.


Gramm-Leach-Bliley, Document Management and Compliance

The ScanGuru has an article about Gramm-Leach-Bliley and how it relates to Document Management  and Compliance. If you are looking to integrate an electronic document management solution into your organization, this is definitely a law that you must understand. It was put into place for the banking industry, but may have some implications in the way you do business.


From the ScanGuru's site:


The Gramm-Leach-Bliley Act, or GLBA, was put into place to allow consolidation in the banking industry. It provided rules for the combining of Commercial and Investment Banking. The main crux of the Act are provisions to protect the private financial information of consumers. The two main regulations governing the protection are the Financial Privacy Rule and the Safeguards Rule. The regulations apply to many different types of financial institutions, including: securities firms, insurance companies, brokerages and banks.


Compliance with GLBA is mandatory, and below is a summary of the two main regulations:


Financial Privacy Rule


The Privacy Rule governs the disclosure and collection of private financial information. It requires Privacy Notifications be submitted to the consumer that discloses how information will be used and/or shared. The consumer has the right to opt out and not provide the required information.


Safeguards Rule


The Safeguards Rule requires a written plan to protect and secure the private information held by an institution. The plan requires overall management of the safeguards through organizational structure, risk management plans for each department that handles the private information, plans for monitoring and auditing compliance and the ability to manage the overall collection, usage, storage, and distribution.


So how do Electronic Document Management Systems or Electronic Content Management Systems help with this daunting task?


EDMS or ECM systems can provide the oversight for managing private information through:


Enhanced Security and Access Controls


Centralized auditing


Centralized, rather than distributed storage


The ability to control usage and distribution


If you are interested in reading more, he has some additional links on his site at Gramm Leach Bliley (GLBA) Document Management Compliance Links