The Gramm–Leach–Bliley Act (GLBA) requires financial institutions —companies that offer consumers financial products or services like loans, financial or investment advice, or insurance— to explain their information-sharing practices to their customers and to safeguard sensitive data.