"For current and former clients, we do not disclose any nonpublic personal information obtained in the course of our practice except as required or permitted by law." . . . .