Nichols applied for a personal loan from ABC Bank. She provided all of the personal and financial information requested by the bank. When she inquired about her application, the bank’s credit officer told her that her application had been denied. When Nichols sought an explanation for the refusal, she was told that her “credit score” was not high enough. The bank refused to provide any information concerning her score or the formula used to calculate the score, claiming this was confidential commercial information. Has the bank complied with the privacy principles required by PIPEDA? What can Nichols do about this?