I saw this in a bank privacy statement:
INFORMATION WE DISCLOSE
We do not disclose Customer Information about our present or former customers to third parties except as permitted by law.
So all they're really saying here is that they're not breaking the law. But that's all. They're willing to give out private information as much as possible (without breaking the law). Ugh!