Gramm Leach Bliley Act Requirements

When issuing student loans, Duquesne University collects personal information from students and their families, including names, addresses, telephone numbers, bank account numbers, and Social Security numbers. Under the Gramm-Leach-Bliley Act, the university must implement a plan to ensure the confidentiality and security of this sensitive information, tailored to the size and nature of its activities. This requirement is known as the _____.