Gramm-Leach-Bliley Act — The Law That Repealed Glass-Steagall
Background
By the late 1990s, the Glass-Steagall barriers were already weakened. Banks had lobbied for decades to enter securities and insurance markets. The 1998 merger of Citicorp (commercial bank) and Travelers Group (insurance + Salomon Smith Barney) forced Congress’s hand — the merger was technically illegal under Glass-Steagall and was approved on the assumption that the law would soon change.
Key Provisions
| Provision | Description |
|---|---|
| Financial Holding Companies | Banks, securities firms, and insurance companies can now operate under one corporate umbrella |
| Glass-Steagall Repeal | Eliminated Sections 20 and 32 of Glass-Steagall, removing the firewall between commercial and investment banking |
| Functional Regulation | Each activity regulated by its traditional regulator: banking by the Fed/OCC, securities by the SEC, insurance by state regulators |
| Privacy Provisions (Title V) | Financial institutions must provide privacy notices and allow consumers to opt out of data sharing with non-affiliates |
| Safeguards Rule | Requires financial institutions to protect the security of customer information |
| CRA Requirements | Holding companies must maintain satisfactory Community Reinvestment Act ratings |
Before and After GLBA
| Dimension | Before GLBA (Glass-Steagall Era) | After GLBA (1999+) |
|---|---|---|
| Bank Structure | Separated: commercial vs. investment | Combined: universal financial holding companies |
| Revenue Sources | Banks limited to deposits and loans | Banks can earn from trading, underwriting, insurance |
| Competition | U.S. banks disadvantaged vs. European universal banks | U.S. banks can compete globally |
| Size | Smaller, more specialized institutions | Mega-banks: JPMorgan, Citigroup, Bank of America |
| Risk | Risk compartmentalized by institution type | Interconnected risk across banking, trading, and insurance |
Connection to the 2008 Financial Crisis
GLBA’s role in the 2008 financial crisis is debated but significant. The Act enabled banks to become massive, interconnected institutions. When the housing market collapsed:
- Universal banks held toxic mortgage-backed securities on their balance sheets
- The interconnection between banking, trading, and insurance amplified systemic risk
- Institutions were deemed “too big to fail,” requiring taxpayer bailouts
- AIG’s insurance operations (enabled by GLBA’s cross-sector framework) nearly brought down the entire financial system
Privacy Provisions — The Overlooked Legacy
While most attention focuses on Glass-Steagall repeal, GLBA’s Title V privacy provisions have lasting relevance. Financial institutions must:
- Provide annual privacy notices explaining data collection and sharing practices
- Give consumers the right to opt out of sharing with non-affiliated third parties
- Implement comprehensive information security programs (the Safeguards Rule)
Key Takeaways
- The Gramm-Leach-Bliley Act (1999) repealed Glass-Steagall’s separation of banking, securities, and insurance
- It enabled financial holding companies combining all three activities under one roof
- The Citicorp-Travelers merger (1998) was the immediate catalyst for the law
- Critics argue GLBA created “too big to fail” banks that contributed to the 2008 crisis
- Its privacy provisions (Title V) remain relevant for consumer data protection in financial services
Frequently Asked Questions
What did the Gramm-Leach-Bliley Act do?
GLBA repealed the Glass-Steagall Act’s prohibition on combining commercial banking, investment banking, and insurance. It created “financial holding companies” that can operate across all three sectors.
Did the Gramm-Leach-Bliley Act cause the 2008 crisis?
The relationship is debated. GLBA enabled the creation of massive, interconnected financial institutions whose failure threatened the entire system. However, many key crisis actors (like Lehman Brothers) were already pure investment banks, not products of GLBA consolidation.
What is a financial holding company?
A corporate structure created by GLBA that allows a single parent company to own commercial banks, investment banks, and insurance companies. JPMorgan Chase and Citigroup are examples.
What are GLBA’s privacy provisions?
Title V of GLBA requires financial institutions to provide privacy notices, allow consumers to opt out of data sharing with non-affiliates, and implement security programs to protect customer information.
Has GLBA been partially reversed?
The Dodd-Frank Act (2010) and the Volcker Rule reimposed some restrictions on banks’ proprietary trading, partially walking back GLBA’s deregulation without fully restoring Glass-Steagall.