(1)Except when required by law and with the exception of specific personal information, FFCI may not release any personal information to third parties without first obtaining the consent of the data subject concerned.