https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act

They should be required to mix out to protect consumer privacy.