Insights

Governance evidence, explained.

Plain-English writing on the FTC Safeguards Rule: who it reaches, who is accountable, and what record has to exist before any of it counts as proof. Written for owners, principals, controllers, and the people who end up holding the file.

Does the Rule apply?

Coverage

Start here if nobody has ever confirmed whether the Rule reaches your organization.

9 min read

Does the FTC Safeguards Rule Apply to Your Business? The Activity Test Explained

Most leaders start with "are we a bank?" and stop. The Rule asks a different question entirely. A five-question test, plus worked examples for dealers, mortgage firms, and tax practices.
10 min read

What Is a Financial Institution Under the FTC Safeguards Rule?

The definition at 16 CFR 314.2(h) in plain English, the activities that should prompt a closer review, five misconceptions worth correcting, and the evidence inventory to gather first.
Also on this site

Reference

Reference

The nine program elements, plus the notification requirement

What each element at 314.4(a) through (i) requires, what record proves it, and why 314.4(j) is not a tenth element.
Reference

Who is covered

The worked coverage examples straight from the regulation, including the exclusions people miss.
Where to start

Find out where your evidence stands

Twenty-one questions, about six minutes, mapped to 16 CFR Part 314.

Check where you stand How engagements work
A.V. Señero, Founder and Governance Evidence Translator of FID Governance LLC

A.V. Señero is Founder and Governance Evidence Translator™ of FID Governance LLC, the Sacramento firm behind PaperTrailProof™. He serves as a designated Qualified Individual under 16 CFR §314.4(a) and educates organizations that collect consumers' financial information on FTC Safeguards Rule accountability, WISP governance, and the evidence required to show an information security program is actually operating.

Leadership is the disciplined allocation of attention toward reducing uncertainty through evidence.

A.V. Señero · FID Governance LLC · Sacramento, California
linkedin.com/in/av-senero-papertrailproof · papertrailproof.com

Disclosure. FID Governance LLC receives compensation from the technology partner whose platform it places clients on. It takes no fee of any kind on independent testing under §314.4(d)(2). Full compensation disclosure.

Educational notice. This material is educational and describes governance methodology. It is not legal advice, does not establish an attorney-client relationship, does not determine whether the FTC Safeguards Rule applies to any particular organization, and does not guarantee regulatory or cybersecurity outcomes. Coverage depends on an organization's specific activities and facts. Consult qualified legal counsel for legal determinations.

Primary sources. 16 CFR Part 314 (Standards for Safeguarding Customer Information) · 16 CFR §314.2 (Definitions) · 12 U.S.C. §1843(k) · FTC staff business guidance for financial institutions.