. . . "We do not disclose any nonpublic personal information obtained in the course of our practice except as required or permitted by law." .