prohibit unlawful disclosure of Social Security numbers by not disclosing any personal information about its clients, employees, vendors, and others, to anyone, except as permitted by law; and limit access to Social Security numbers of our clients, employees, vendors, and others to only those employees who have a valid and legitimate reason to have such information.