CORRECT – The GLBA states that to protect the confidentiality of customers’ personal information, all rooms and file cabinets where paper records are kept should be locked.