Federal statute requiring financial institutions to safeguard customer information and disclose information-sharing practices.