The car dealership violated The Gramm-Leach-Bliley Act. This act protects consumer financial privacy.
when the customer gives you their personal information and you intend on sharing their information with another party you must give the consumer A privacy notice /opt out notice.
