Which level of compliance is required by a cloud service provider to protect customer data...

The Gramm-Leach-Bliley Act (GLBA) requires cloud service providers to protect customer data for banks and insurance companies. Managing Cloud principles explain that GLBA applies to financial institutions and mandates safeguards to protect consumers’ nonpublic personal information.

Cloud service providers supporting financial organizations must implement security controls that align with GLBA requirements, including data protection, risk management, and access controls. This ensures confidentiality and integrity of financial data stored or processed in the cloud.

IDEA governs education services, DMCA addresses digital copyright, and FERPA protects student education records. Therefore, GLBA is the correct compliance requirement.