A U.S. law that requires financial institutions to explain how they share and protect their customers' private information.