In late 2021, the Federal Trade Commission amended the Gramm-Leach-Bliley Act’s Safeguards Rule enhancing information security program (ISP) requirements that non-bank financial institutions must implement to protect their customers’ personal