The Bank’s understanding is that there is no longer a requirement to send an annual privacy notice if the Bank has not made any changes to its privacy policy or does not share information, as well as if such notice is available on the Bank’s website. The Bank also understands that even though the law has changed to this effect, there are no final rules issued by the banking regulatory agencies implementing such. Is the Bank’s understanding correct? The Bank includes a message in periodic statements indicating that the privacy notice is available on the Bank’s website. Is the message on the periodic statement still required?