Personal data held by a Citi Entity relating to a Data Subject will be kept confidential but it may provide such information to the following parties for the purposes permitted under this policy statement: