The FTC Safeguards Rule is a regulation that aims to protect sensitive customer information by setting requirements for financial institutions. In the context of the FTC Safeguards Rule, the term “financial institution” is defined more broadly than how many of us would typically think of it. It applies to “any institution the business of which is engaging in an activity that is financial in nature or incidental to such financial activities”. This is further defined in section 4(k) of the Bank Holding Company Act of 1956 12 U.S.C § 1843(k) (scroll to page 11 of the PDF).