What is a key component of GLBA?

"The right to be forgotten" is a concept primarily associated with GDPR (General Data Protection Regulation) in the EU, not GLBA in the US.

"EU Data Directives" refer to European Union regulations, whereas GLBA is a United States federal law.

The Gramm-Leach-Bliley Act (GLBA) mandates that financial institutions protect their customers' nonpublic personal information. A central requirement of the GLBA's Safeguards Rule is that covered institutions must develop, implement, and maintain a comprehensive information security program designed to protect the security, confidentiality, and integrity of such information.

While audits are part of compliance, "the right to audit" is not a specific, overarching key component or a direct provision like the requirement for an information security program under GLBA.