Every mortgage lender must master the Gramm-Leach-Bliley Act (GLBA). Beyond GSE rules, the FTC Safeguards Rule requires strict data protection, risk assessments, and breach reporting for non-bank lenders handling consumer financial information.