Customers entrust financial institutions and other businesses with sensitive financial, payment card, and other personal information. To address the increased potential for consumer harm or fraud caused by the improper disclosure or misuse of this information, certain sector-specific laws and self-regulatory standards provide additional protections for payment card data and other financial information or impose additional obligations on financial or credit institutions.

Laws and self-regulatory standards that specifically address the privacy and security of financial, credit, or payment card data include:

Failure to comply with these privacy and data security laws and standards can result in significant adverse consequences, including:

This Toolkit contains resources that provide practical guidance on complying with laws and standards that apply specifically to the collection, use, disclosure, and protection of consumers' financial information.