Financial Crime World

Puerto Rico Takes a Proactive Approach to Cybersecurity in the Financial Sector

In the face of growing cyber threats, Puerto Rico is taking decisive action to protect its financial institutions and consumers from potential attacks.

Protecting Personal Data


Puerto Rico’s Data Protection Act requires financial institutions to have appropriate security measures in place to safeguard sensitive customer information. Additionally, the Gramm-Leach-Bliley Act mandates that these institutions:

  • Develop an information security program
  • Perform regular risk assessments
  • Implement safeguards to protect customer data

Regulatory Framework


The Office of the Commissioner of Financial Institutions in Puerto Rico oversees the regulation and supervision of financial institutions operating on the island. The agency:

  • Monitors compliance with cybersecurity protocols
  • Ensures that institutions have robust systems in place to prevent and detect cyber threats

Public-Private Partnerships


Puerto Rico is partnering with private sector companies to provide resources, training, and support for implementing cybersecurity measures. This collaborative approach aims to increase education and awareness of cybersecurity risks among businesses and individuals.

Cybersecurity Insurance


Financial institutions operating in Puerto Rico are required to have cyber insurance that meets federal guidelines. The island’s insurance market offers specialized policies designed specifically for financial institutions.

Law Enforcement and Coordination with Federal Agencies


Local law enforcement plays a crucial role in investigating and prosecuting cyber crimes targeting the financial sector. They work closely with federal agencies, such as:

  • FBI
  • Department of Homeland Security

Puerto Rico also coordinates with these agencies to:

  • Share information
  • Conduct joint exercises and training
  • Develop response plans

Ongoing Initiatives


The Puerto Rico Cybersecurity Task Force was established in 2019 to address potential cyber threats and develop strategies and protocols to protect critical infrastructure. The island’s Critical Infrastructure Protection Plan identifies key areas of vulnerability and provides guidelines for protecting against cyber attacks.

As Puerto Rico continues to strengthen its cybersecurity posture, it is clear that the government’s proactive approach will help safeguard the financial sector and consumers from emerging cyber threats.