Certified Citibank TCPA Class Action and the Consumer Data
Administrator must demonstrate it has an information security plan sufficient to comply with the data security regulations of the Gramm-Leach Bliley Act. Until it demonstrates such data security Citibank does not need to produce data.
Source: natlawreview.com