GLBA Compliance in Plain English — What NSA Signing Agents Must Actually Do

The Gramm-Leach-Bliley Act — GLBA — is a 1999 federal privacy law. If that already sounds boring, stay with me. GLBA is the single most important compliance framework governing what a Notary Signing Agent (NSA) is allowed to do with the loan documents you touch every day. The NNA background screening you paid for exists because of GLBA. So does the certification renewal every year. Understanding GLBA in one sitting is the fastest way to level up as a professional.

What GLBA Actually Says (in one sentence)

Financial institutions — banks, credit unions, mortgage lenders — must protect the nonpublic personal information (NPI) of their customers. When a lender hires a signing agent to bring loan documents to a borrower, you become a service provider under GLBA. You inherit the same obligation to protect that data.

What is NPI, Exactly?

• Social Security numbers
• Dates of birth
• Bank account numbers and routing numbers
• Loan balances, credit scores, and payment histories
• Signatures and initials tied to a financial account
• The mere fact that a specific person is a customer of a specific lender

The Five Habits That Keep a Signing Agent Compliant

1. Secure printing

Print in a locked office or vehicle-based printer. Never print at a UPS store, an office share, or a friend's house. If someone else can see the documents come out of the printer, you are already out of compliance.

2. Locked transport

Documents move from your printer to the signer, and from the signer to the courier drop. They live in a locked case, a locked vehicle, or in your physical possession — never in a passenger seat with the windows down, never overnight in a hotel lobby.

3. No copies for you

Do not keep a copy of the signed loan documents. Once the courier accepts the package, you are done. Any scan you make of the executed package for your own records is a potential GLBA violation.

4. Journal enough, but not too much

Log the notarial acts, not the loan details. Your journal records that you notarized an acknowledgment for John Smith on a Deed of Trust — not the loan amount, not the interest rate, not the account number.

5. Destroy remnants securely

Test pages, misprints, and confidential drafts must be shredded — not thrown in a trash bag on Wednesday morning. A cross-cut shredder is a compliance tool, not an office accessory.

Why This Matters More in 2026

Data privacy enforcement has accelerated. The Consumer Financial Protection Bureau, state attorneys general, and title insurance underwriters are increasingly asking service providers — including notaries — for proof of GLBA-compliant handling. A signing agent who can articulate GLBA in a two-sentence answer stands out. A signing agent who cannot is quietly rotated out.

The Simplest Test

Before you leave a signing, look around the room and your vehicle. Ask yourself: if the lender's compliance officer walked in right now, would they see confidential customer information exposed? If the answer is anything other than a firm no, you are not yet compliant. Fix it before the courier arrives.