The Gramm-Leach-Bliley Act (GLBA) is a United States federal law that regulates the collection, disclosure, and protection of non-public personal information (NPI) by financial institutions. It requires financial institutions to implement safeguards to protect the confidentiality and integrity of customer data, provide privacy notices, and give customers the opportunity to opt-out of having their personal information shared with third parties for marketing purposes.