The Gramm-Leach-Bliley Act & Skip Tracing
The Gramm-Leach-Bliley Act – the GLBA – is one of the laws that sets the boundaries of legitimate skip tracing, and understanding it explains a great deal about why a real professional works the way they do. Passed in 1999, the GLBA governs how financial institutions handle “nonpublic personal information” – the private financial data tied to a person’s accounts – and it does two things that matter here. First, it restricts how that nonpublic financial information may be shared and used, carving out specific permissible exceptions under which it can move. Second, and just as important, it flatly prohibits “pretexting”: obtaining someone’s financial information by impersonation, false pretenses, or deception. That single prohibition is why a credible skip tracer will never call your bank pretending to be you – it is not a matter of etiquette, it is a federal line. This page explains, in plain English, how lawful skip tracing operates within the GLBA’s framework: what the law protects, the permissible-purpose exceptions professionals rely on, and the bright line that pretexting crosses. We are a public-records research firm working under a permissible purpose, not licensed private investigators, and this is general information, not legal advice.
The Short Version
The Gramm-Leach-Bliley Act (GLBA) governs how financial institutions handle nonpublic personal financial information and sets two rules that shape lawful skip tracing. It restricts the sharing and use of that private financial data, allowing it to move only under specific permissible exceptions – and it expressly prohibits pretexting, the practice of obtaining financial information through impersonation or false pretenses. So a lawful skip trace stays inside public records and properly licensed data, relies on a legitimate permissible purpose, and never tricks a bank, employer, or the subject’s contacts into handing over protected information. The GLBA is one reason professional skip tracing is records work rather than deception: the law makes the deceptive route illegal. If a service offers to get you someone’s bank balances or account details by “just asking,” that is the pretexting the GLBA forbids – and a sign to walk away. This page is general information, not legal advice; consult counsel for your specific situation.
Watch: GLBA, Explained
What the law protects and what it forbids.
Watch Overview
What the GLBA Actually Governs
Financial privacy, exceptions, and a hard line.
The GLBA’s subject is nonpublic personal information – the private financial data a person shares with a bank, lender, or other financial institution, like account numbers, balances, and transaction details. The law’s privacy provisions limit how that information may be disclosed and reused, and they allow it to flow only under defined permissible exceptions, such as carrying out a transaction the consumer requested, complying with legal process, or protecting against fraud. For a skip tracer, the practical effect is a clear boundary: you operate on public records and lawfully licensed data and you rely on a legitimate purpose, rather than reaching into protected financial files. This sits alongside the broader legality picture in is skip tracing legal – the GLBA is the piece that specifically governs financial data.
The sharpest edge of the law is its anti-pretexting provision. The GLBA makes it unlawful to obtain a customer’s financial information from a financial institution – or from the customer – by making false, fictitious, or fraudulent statements, the technique known as pretexting (15 U.S.C. § 6821). In plain terms, a tracer cannot call your bank pretending to be you, or pose as someone else to coax account details out of a person. This is exactly why legitimate skip tracing is built on records and verification rather than impersonation – the deceptive shortcut is a federal offense, not merely bad form. It is the same discipline that runs through how skip tracing works: lawful sourcing first, with the GLBA marking one of the firmest lines no professional crosses.
Allowed vs. Prohibited
Where the GLBA draws its lines.
| Activity | Under the GLBA | What it means here |
|---|---|---|
| Public-records research | Outside GLBA-protected data. Allowed | The core of a lawful locate. |
| Licensed data, permissible use | Permitted under exceptions. | Used for a legitimate purpose. |
| Pretexting a bank | Expressly prohibited. | We never do it. |
| Posing as the subject | Prohibited deception. | Off the table, always. |
| Pulling account balances | Protected financial data. | Not part of our work. |
The line is consistent: lawful skip tracing develops a current address from public records and licensed data for a permissible purpose, and it never obtains protected financial information through deception. If a provider offers to deliver bank balances or account details on demand, they are describing the pretexting the GLBA forbids – and the result would be tainted besides. That clean-sourcing standard is also what makes a result trustworthy, which is why it pairs naturally with knowing how to verify a skip tracing report: lawfully obtained findings are the ones that hold up.
Why the GLBA Matters to You
Where the law touches real requests.
Choosing a Tracer
One that refuses to pretext.
A Collections Matter
Locating a debtor lawfully.
An Asset Question
Recorded ownership, not accounts.
A Compliance Review
Confirming a vendor’s practices.
A “Too-Good” Offer
Bank details on demand – a red flag.
Peace of Mind
Knowing the work is lawful.
How We Stay Inside the Line
Purpose, lawful sources, no deception, documentation.
Confirm a Purpose
A legitimate, permissible reason.
Use Lawful Sources
Public records and licensed data.
Never Pretext
No impersonation, no false pretenses.
Document the Work
Sourced findings, honest notes.
Our Role: Lawful by Design
The GLBA is built into how we work.
For us, GLBA compliance is not a box checked at the end – it shapes the method from the start. We work public records and lawfully licensed data under a permissible purpose, as a skip-tracing and public-records research firm, not as licensed private investigators, and we do not pretext, impersonate, or otherwise deceive anyone to obtain information – the practice the GLBA criminalizes. We also do not pull or trade in protected financial-account contents; locating a person and confirming recorded asset ownership is a different exercise from reaching into someone’s bank files, and we stay firmly on the lawful side of that distinction. When a matter would require something the law does not allow, we say so plainly rather than finding a workaround.
That discipline is also what makes our work useful. Findings obtained lawfully are findings you can rely on and document, where information squeezed out through deception would be tainted and worthless. Each result comes with its source and honest notes on what could and could not be confirmed. The decisions stay with you and your counsel – and for anything turning on the specifics of the GLBA or a regulated decision, that is a question for a lawyer. The hub at skip tracing services lays out the full scope of what we do within these boundaries.
Who This Matters To
Roles where GLBA compliance is essential.
Attorneys
Defensible, lawful results
Creditors
Compliant collections
Lenders
Within financial-privacy rules
Compliance Teams
Vetting a tracing vendor
Process Servers
Lawfully sourced addresses
Investigators
Clean, usable findings
Whatever your role, the value is the same: a locate done within the GLBA’s lines, so the result is both useful and defensible. We will tell you honestly when a request would cross into protected territory, and we keep the work on lawful ground. Tell us who and what you know, along with your permissible purpose; a first read typically comes back within 24 hours.
Our Commitment
We build GLBA compliance into the method – confirming a permissible purpose, working only public records and lawfully licensed data, never pretexting or impersonating anyone to obtain protected financial information, and documenting each finding with its source. We find and verify the facts lawfully; you and your counsel handle the decisions. Lawful research since 2004 – never pretext, never private financial contents, never a substitute for legal advice.
Frequently Asked Questions
What is the Gramm-Leach-Bliley Act, in plain terms?
It is a 1999 federal law that governs how financial institutions handle nonpublic personal financial information – the private data tied to a person’s accounts. It limits how that information can be shared and used, allowing it only under defined permissible exceptions, and it separately prohibits pretexting: obtaining financial information through impersonation or false pretenses. Together those rules shape what a lawful skip tracer can and cannot do.
How does the GLBA affect skip tracing?
It sets boundaries. A lawful skip trace works from public records and properly licensed data under a permissible purpose, and it never reaches into GLBA-protected financial files or uses deception to get them. The law is a big reason professional skip tracing is records-and-verification work rather than trickery – the deceptive route is illegal, so a credible firm does not take it.
What is pretexting, and does the GLBA ban it?
Pretexting is obtaining someone’s financial information by pretending to be them or otherwise using false statements – for example, calling a bank impersonating the customer. The GLBA expressly prohibits it. A legitimate tracer will never pretext, both because it is unlawful and because anything obtained that way would be tainted and unusable.
Can a skip tracer get me someone’s bank balance or account details?
No – not lawfully. Account balances and details are exactly the kind of nonpublic financial information the GLBA protects, and obtaining them by deception is the pretexting the law forbids. Anyone promising bank details on demand is describing an illegal method. We locate people and confirm recorded asset ownership through lawful sources; we do not pull protected account contents.
Then how can you research assets at all?
Through public records, not private accounts. Property ownership, recorded liens, and similar holdings appear in public and lawfully licensed records, which is entirely different from a person’s protected bank files. We build a corroborated picture of what those records show, documented with its source – useful for a judgment or debt – while staying clear of the GLBA-protected financial data the law shields.
How can I tell if a tracing service is GLBA-compliant?
Ask how they obtain information. A compliant firm relies on public records and licensed data under a permissible purpose and will tell you plainly that it does not pretext or pull protected account contents. A service that offers bank balances, account details, or “we just call and ask” is a warning sign – that is the pretexting the GLBA prohibits. Lawful sourcing is the test.
Is this legal advice?
No. This page is general information to explain how the GLBA shapes lawful skip tracing, not legal advice for your situation. The GLBA interacts with other laws, and how it applies can depend on specifics. For a regulated decision or a close compliance question, consult an attorney – we keep our work within the law and route legal questions to counsel.
How fast can you complete a GLBA-compliant locate?
For a workable request, a first read typically comes back within 24 hours, all within the lawful boundaries described here. You receive a current address where one is locatable, with confirmation of identity and honest notes on completeness – each finding documented with its source – so you can serve, collect, reconnect, or decide your next step on solid, lawfully obtained records.
A Locate Done Within the Law
Tell us who you need to find and what you know, along with your permissible purpose, and we’ll research it inside the GLBA’s lines – lawfully sourced, corroborated, and honestly documented – typically with a first read within 24 hours. Contact us to get started.
Start Your Request →
