A large US bank embarks on a 3 year program to design, build and implement Non-Public Personal Information (NPPI) controls across the bank and resolve non-compliance issues related to the Gramm–Leach–Bliley Act (GLBA).