FTC Safeguards Rule Training: 2023 Amendments and What You Need (2026)
The FTC Safeguards Rule at 16 CFR Part 314 requires non-bank financial institutions to maintain a written information security program, and that program must include security awareness training plus specialized training for the personnel responsible for it. The amended rule became fully enforceable on June 9, 2023, and it reaches well beyond banks.
Auto dealers, mortgage brokers, tax preparers, retailers offering in-house financing, collection agencies, and investment advisors all fall inside the FTC’s definition of a “financial institution.” Many of them spent 2023 and 2024 scrambling to document training programs their compliance teams had assumed were already in place.