17 C.F.R. § 248.14
(a) Exceptions for processing and servicing transactions at consumer's request. The requirements for initial notice in § 248.4(a)(2), for the opt out in §§ 248.7 and 248.10, and for initial notice in § 248.13 in connection with service providers and joint marketing, do not apply if you disclose nonpublic personal information as necessary to effect, administer, or enforce a transaction that a consumer requests or authorizes, or in connection with:
(b) Necessary to effect, administer, or enforce a transaction means that the disclosure is:
(2) Required, or is a usual, appropriate, or acceptable method:
(vi) In connection with: