The notice includes the institution's policies and practices on disclosing nonpublic personal information to nonaffiliated third parties other than its agents, consistent with section 502, including the categories of persons to whom information is or may be disclosed other than under the section 502(e) exceptions and the practices for former customers' information; the categories of nonpublic personal information the institution collects; the policies it maintains to protect the confidentiality and security of nonpublic personal information under section 501; and any disclosures required under section 603(d)(2)(A)(iii) of the Fair Credit Reporting Act.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.