In _______________, Congress enacted restrictions on the way financial institutions disclose information on customers to third parties. The law also requires financial institutions to provide disclosures, both at the time of establishing the customer relationship and annually thereafter.