15 U.S.C. § 6801: Protection of nonpublic personal information

It is the policy of the Congress that each financial institution has an affirmative and continuing obligation to respect the privacy of its customers and to protect the security and confidentiality of those customers’ nonpublic personal information. to insure the security and confidentiality of customer records and information; to protect against any anticipated threats or hazards to the security or integrity of such records; and to protect against unauthorized access to or use of such records or information which could result in substantial harm or inconvenience to any customer. to the extent that a later date is specified in the rules prescribed under section 504; and that sections 504 [ 15 U.S.C. 6804 ] and 506 [enacting section 6806 of this title and amending section 1681s of this title ] shall be effective upon enactment [ Nov. 12, 1999 ].”