"Regulation S-P requires investment advisors, broker-dealers and other financial institutions to protect client information." . . . .