"The law further allows the release and/or disclosure of nonpublic personal information to comply with federal, state or local laws or regulations or other legal requirements, such as subpoenas or other legal processes." . . . . . .