We perform a review of the institution’s sharing practices for non-public personal information to determine whether the content of its Privacy Notice and its delivery practices comply with regulatory requirements, including opt-out provisions, as applicable.