17 C.F.R. § 160.14
(a) Exceptions for processing and servicing transactions at consumer's request. The requirements for initial notice in § 160.4(a)(2), for the opt out in §§ 160.7 and 160.10, and for initial notice in § 160.13 in connection with service providers and joint marketing, do not apply if you disclose nonpublic personal information as necessary to effect, administer, or enforce a transaction that a consumer requests or authorizes, or in connection with:
(b) Necessary to effect, administer or enforce a transaction means that the disclosure is:
(2) Required, or is a usual, appropriate or acceptable method:
(v) In connection with: